medium4.3

CVE-2013-4589

The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors r…

Impact

The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image.

Affected products

Vendor	Product	Affected versions
Novell	Suse Linux Enterprise Software Development Kit	Version 11.0
Novell	Suse Studio Onsite	Version 1.3
Novell	Suse Linux Enterprise Debuginfo	Version 11
Graphicsmagick	Graphicsmagick	through 1.3.17 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
Fedoraproject	Fedora	Version 18

References

NVD record
CVE.org record
http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120008.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html
http://secunia.com/advisories/55288
http://secunia.com/advisories/55721
http://security.gentoo.org/glsa/glsa-201311-10.xml
http://sourceforge.net/p/graphicsmagick/code/ci/1a2d7a38363f7f23b63d626887d22d39c7240144/
http://sourceforge.net/p/graphicsmagick/discussion/250737/thread/20888e8b/
http://www.openwall.com/lists/oss-security/2013/11/15/14
http://www.securityfocus.com/bid/63002
https://bugzilla.redhat.com/show_bug.cgi?id=1019085
http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120008.html
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00032.html
http://secunia.com/advisories/55288
http://secunia.com/advisories/55721
http://security.gentoo.org/glsa/glsa-201311-10.xml
http://sourceforge.net/p/graphicsmagick/code/ci/1a2d7a38363f7f23b63d626887d22d39c7240144/
http://sourceforge.net/p/graphicsmagick/discussion/250737/thread/20888e8b/
http://www.openwall.com/lists/oss-security/2013/11/15/14
http://www.securityfocus.com/bid/63002
https://bugzilla.redhat.com/show_bug.cgi?id=1019085