p PatchFirst

CVE-2009-1882

CVE-2009-1882

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow. NOTE: some of these details are obtained from third party information.

EPSS 7.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • graphicsmagick Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.3.5-5.1

    Update to 1.3.5-5.1

  • graphicsmagick Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.3.5-5.1

    Update to 1.3.5-5.1

  • graphicsmagick Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.3.5-5.1

    Update to 1.3.5-5.1

  • imagemagick Debian:12

    Affected ranges
    • ECOSYSTEM: < 7:6.5.1.0-1.1

    Update to 7:6.5.1.0-1.1

  • imagemagick Debian:13

    Affected ranges
    • ECOSYSTEM: < 7:6.5.1.0-1.1

    Update to 7:6.5.1.0-1.1

  • imagemagick Debian:14

    Affected ranges
    • ECOSYSTEM: < 7:6.5.1.0-1.1

    Update to 7:6.5.1.0-1.1

Original sources

Check your server →