CVE

Id
31214  
CVE No.
CVE-2008-1097  
Status
Candidate  
Description
Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption.  
Phase
Assigned (20080228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
332906 31214 CVE-2008-1097 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=285861  View
332907 31214 CVE-2008-1097 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413034  View
332908 31214 CVE-2008-1097 DEBIAN:DSA-1858  View
332909 31214 CVE-2008-1097 URL:http://www.debian.org/security/2009/dsa-1858  View
332910 31214 CVE-2008-1097 GENTOO:GLSA-201311-10  View
332911 31214 CVE-2008-1097 URL:http://security.gentoo.org/glsa/glsa-201311-10.xml  View
332912 31214 CVE-2008-1097 MANDRIVA:MDVSA-2008:099  View
332913 31214 CVE-2008-1097 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:099  View
332914 31214 CVE-2008-1097 REDHAT:RHSA-2008:0145  View
332915 31214 CVE-2008-1097 URL:http://www.redhat.com/support/errata/RHSA-2008-0145.html  View
332916 31214 CVE-2008-1097 REDHAT:RHSA-2008:0165  View
332917 31214 CVE-2008-1097 URL:http://www.redhat.com/support/errata/RHSA-2008-0165.html  View
332918 31214 CVE-2008-1097 SUSE:SUSE-SR:2008:014  View
332919 31214 CVE-2008-1097 URL:http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html  View
332920 31214 CVE-2008-1097 BID:28822  View
332921 31214 CVE-2008-1097 URL:http://www.securityfocus.com/bid/28822  View
332922 31214 CVE-2008-1097 OSVDB:43213  View
332923 31214 CVE-2008-1097 URL:http://osvdb.org/43213  View
332924 31214 CVE-2008-1097 OVAL:oval:org.mitre.oval:def:11237  View
332925 31214 CVE-2008-1097 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11237  View
332926 31214 CVE-2008-1097 SECTRACK:1019881  View
332927 31214 CVE-2008-1097 URL:http://www.securitytracker.com/id?1019881  View
332928 31214 CVE-2008-1097 SECUNIA:29786  View
332929 31214 CVE-2008-1097 URL:http://secunia.com/advisories/29786  View
332930 31214 CVE-2008-1097 SECUNIA:29857  View
332931 31214 CVE-2008-1097 URL:http://secunia.com/advisories/29857  View
332932 31214 CVE-2008-1097 SECUNIA:30967  View
332933 31214 CVE-2008-1097 URL:http://secunia.com/advisories/30967  View
332934 31214 CVE-2008-1097 SECUNIA:36260  View
332935 31214 CVE-2008-1097 URL:http://secunia.com/advisories/36260  View
332936 31214 CVE-2008-1097 SECUNIA:55721  View
332937 31214 CVE-2008-1097 URL:http://secunia.com/advisories/55721  View
332938 31214 CVE-2008-1097 XF:imagemagick-readpcximage-bo(41193)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45982 JVNDB-2008-001292 Autonomy KeyView の kvdocve.dll におけるバッファオーバーフローの脆弱性 Autonomy KeyView の KeyView ドキュメントビューイングエンジンにおける kvdocve.dll には、pathname 値の取り扱いに不備があり、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2008-1101 31214 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001292.html  View