Lucene search

K
cve[email protected]CVE-2012-3438
HistoryAug 07, 2012 - 9:55 p.m.

CVE-2012-3438

2012-08-0721:55:02
CWE-119
web.nvd.nist.gov
26
cve-2012-3438
graphicsmagick
denial of service
crash
memory allocation
png

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.029 Low

EPSS

Percentile

90.8%

The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.

Affected configurations

NVD
Node
graphicsmagickgraphicsmagickMatch1.3.16

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.029 Low

EPSS

Percentile

90.8%