Unscored severity · published Jul 10, 2008
CVE-2008-3134
Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a)…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
Graphicsmagick · Graphicsmagick
1.0; 1.0.4; 1.0.6; 1.1; 1.1.3; 1.1.4; +9 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3134
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3134
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html
Vendor Advisory
http://secunia.com/advisories/30879
secunia.com
http://secunia.com/advisories/32151
sourceforge.net
http://sourceforge.net/forum/forum.php?forum_id=841176
sourceforge.net
http://sourceforge.net/project/shownotes.php?release_id=610253
www.securityfocus.com
http://www.securityfocus.com/bid/30055
More from Graphicsmagick
9.8
CVE-2025-27796
ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob
9.8
CVE-2020-10938
GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
9.8
CVE-2019-19951
In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c
9.8
CVE-2019-19950
In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c
9.8
CVE-2019-11005
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attackers to cause a denial…