CVE-2015-8808 The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file.
MediumCVSS 5.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/graphicsmagick(Debian:12) | < 1.3.21-2 | 1.3.21-2 |
| debian/graphicsmagick(Debian:13) | < 1.3.21-2 | 1.3.21-2 |
| debian/graphicsmagick(Debian:14) | < 1.3.21-2 | 1.3.21-2 |
| graphicsmagick | <= 1.3.17 | No fix listed |
| SUSE linux enterprise debuginfo | = 11-sp4 | No fix listed |
| SUSE studio onsite | = 1.3 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp4 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
References
- Debian Security Tracker CVE-2015-8808 vendor-advisory
- FEDORA-2016-49bf88cd29 vendor-advisory
- SUSE-SU-2016:1614 vendor-advisory
- [graphicsmagick-commit] 20150202 [GM-commit] GraphicsMagick: Assure that GIF decoder does not use unitialized... mailing-list
- DSA-3746 vendor-advisory
- [oss-security] 20160206 CVE request: Out-of-bound read in the parsing of gif files using GraphicsMagick 1.3.18 mailing-list
- [oss-security] 20160206 Re: CVE request: Out-of-bound read in the parsing of gif files using GraphicsMagick 1.3.18 mailing-list
- 83058 vdb-entry