cbcvebase.
CVE-2009-1882
published 2009-06-02

CVE-2009-1882: Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of…

PriorityP341critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
7.15%
93.6th percentile
Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow. NOTE: some of these details are obtained from third party information.

Affected

11 ranges
VendorProductVersion rangeFixed in
debiangraphicsmagick< graphicsmagick 1.3.5-5.1 (bookworm)graphicsmagick 1.3.5-5.1 (bookworm)
debianimagemagick< graphicsmagick 1.3.5-5.1 (bookworm)graphicsmagick 1.3.5-5.1 (bookworm)
graphicsmagickgraphicsmagick>= 0 < 1.3.5-5.11.3.5-5.1
graphicsmagickgraphicsmagick>= 0 < 1.3.5-5.11.3.5-5.1
graphicsmagickgraphicsmagick>= 0 < 1.3.5-5.11.3.5-5.1
graphicsmagickgraphicsmagick>= 0 < 1.3.5-5.11.3.5-5.1
imagemagickimagemagick——
imagemagickimagemagick>= 0 < 7:6.5.1.0-1.17:6.5.1.0-1.1
imagemagickimagemagick>= 0 < 7:6.5.1.0-1.17:6.5.1.0-1.1
imagemagickimagemagick>= 0 < 7:6.5.1.0-1.17:6.5.1.0-1.1
imagemagickimagemagick>= 0 < 7:6.5.1.0-1.17:6.5.1.0-1.1

CVSS provenance

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL
vendor_debian9.3MEDIUM
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.