Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-3438
HistoryAug 07, 2012 - 9:55 p.m.

CVE-2012-3438

2012-08-0721:55:02
CWE-119
[email protected]
web.nvd.nist.gov
31
cve-2012-3438
graphicsmagick
denial of service
crash
memory allocation
png

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.029

Percentile

90.9%

JSON

The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.

Affected configurations

NVD
Node
graphicsmagickgraphicsmagickMatch1.3.16
VendorProductVersionCPE
graphicsmagickgraphicsmagick1.3.16cpe:/a:graphicsmagick:graphicsmagick:1.3.16:::

Related

nessus 9
openvas 9
cvelist 1
nvd 1
securityvulns 1
fedora 3
prion 1
ubuntucve 1
debiancve 1
freebsd 1
nessus
nessus
Fedora 16 : GraphicsMagick-1.3.16-5.fc16 (2012-12366)
2012-09-10 00:00:00
Mandriva Linux Security Advisory : graphicsmagick (MDVSA-2012:165)
2012-10-15 00:00:00
SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 8512)
2013-05-08 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2013:0757-1)
2021-06-09 00:00:00
Mandriva Update for graphicsmagick MDVSA-2012:165 (graphicsmagick)
2012-10-16 00:00:00
Fedora Update for GraphicsMagick FEDORA-2012-12366
2012-09-11 00:00:00
cvelist
cvelist
CVE-2012-3438
2012-08-07 21:00:00
nvd
nvd
CVE-2012-3438
2012-08-07 21:55:02
securityvulns
securityvulns
graphicsmagick memory corruption
2012-10-17 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: GraphicsMagick-1.3.16-5.fc17
2012-09-07 11:34:45
[SECURITY] Fedora 16 Update: GraphicsMagick-1.3.16-5.fc16
2012-09-07 11:31:15
[SECURITY] Fedora 18 Update: GraphicsMagick-1.3.16-5.fc18
2012-09-17 23:48:44
prion
prion
Design/Logic Flaw
2012-08-07 21:55:00
ubuntucve
ubuntucve
CVE-2012-3438
2012-08-07 00:00:00
debiancve
debiancve
CVE-2012-3438
2012-08-07 21:55:02
freebsd
freebsd
ImageMagick and GraphicsMagick -- DoS via specially crafted PNG file
2012-07-28 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.029

Percentile

90.9%

JSON
Related for CVE-2012-3438
nessus9openvas9cvelist1nvd1securityvulns1fedora3prion1ubuntucve1debiancve1freebsd1