CVE-2008-3134 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2008-3134 Interim 1 5 2023-12-09T02:09:01Z current 2021-05-30T12:43:15Z 2023-12-09T02:09:01Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2008-3134 Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GL4QOA4XJKS6PJ7GWWQFLRF2CT7LMME2/#GL4QOA4XJKS6PJ7GWWQFLRF2CT7LMME2 E-Mail link for SUSE-SR:2008:020 https://www.suse.com/support/security/rating/ SUSE Security Ratings Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file. CVE-2008-3134 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P