CVE-2019-11005
Fixed in a distro release EPSS 4%
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a quoted font family value.
Products: graphicsmagick, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | graphicsmagick | 1.4~hg15968-1 |
| Debian 13 | graphicsmagick | 1.4~hg15968-1 |
| Debian 14 | graphicsmagick | 1.4~hg15968-1 |
| SUSE Package Hub 15 | GraphicsMagick | 1.3.29-bp150.2.18.1 |
| Ubuntu 18.04 LTS | graphicsmagick | 1.3.28-2ubuntu0.1 |
| openSUSE Leap 15.0 | GraphicsMagick | 1.3.29-lp150.3.25.1 |