CVE-2008-6071| Date: (C)2009-02-10 (M)2017-08-08 |
| |
| CVSS Score: 10.0 | Access Vector: NETWORK |
| Exploitability Subscore: 10.0 | Access Complexity: LOW |
| Impact Subscore: 10.0 | Authentication: NONE |
| | Confidentiality: COMPLETE |
| | Integrity: COMPLETE |
| | Availability: COMPLETE |
Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PICT image. NOTE: some of these details are obtained from third party information.
