Advisories » MGASA-2014-0484

Updated graphicsmagick packages fix security vulnerability

Publication date: 25 Nov 2014
Modification date: 25 Nov 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-8355

Description

GraphicsMagick is vulnerable to an out of bounds read / heap Overflow in the
function ReadPCXImage in the file pcx.c. This can be exploited by a crafted
image file to cause a denial of service (CVE-2014-8355).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14546
• http://seclists.org/fulldisclosure/2014/Nov/1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8355

SRPMS

4/core

• graphicsmagick-1.3.18-3.3.mga4

3/core

• graphicsmagick-1.3.17-2.4.mga3