Ubuntu.comUB:CVE-2013-4589CVE-2013-4589
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.01 Low
EPSS
Percentile
83.5%
The ExportAlphaQuantumType function in export.c in GraphicsMagick before
1.3.18 might allow remote attackers to cause a denial of service (crash)
via vectors related to exporting the alpha of an 8-bit RGBA image.
Bugs
References
sourceforge.net/p/graphicsmagick/discussion/250737/thread/20888e8b/
www.openwall.com/lists/oss-security/2013/11/15
bugzilla.redhat.com/show_bug.cgi?id=1019085
launchpad.net/bugs/cve/CVE-2013-4589
nvd.nist.gov/vuln/detail/CVE-2013-4589
secunia.com/advisories/55288/
security-tracker.debian.org/tracker/CVE-2013-4589
www.cve.org/CVERecord?id=CVE-2013-4589
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.01 Low
EPSS
Percentile
83.5%