CVE-2008-6070
Fixed in a distro release EPSS 4%
Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770. NOTE: some of these details are obtained from third party information.
Products: graphicsmagick
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | graphicsmagick | 1.2.3-1 |
| Debian 13 | graphicsmagick | 1.2.3-1 |
| Debian 14 | graphicsmagick | 1.2.3-1 |
| Debian 4.0 | graphicsmagick | 1.1.7-13+etch1 |
| Debian 5.0 | graphicsmagick | 1.1.11-3.2+lenny1 |