VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 5, 2008· Updated Jun 16, 2026

CVE-2008-1097

CVE-2008-1097

Description

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • ImageMagick/Graphicsmagick6 versions
    cpe:2.3:a:imagemagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:imagemagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*
    • cpe:2.3:a:imagemagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*
    • cpe:2.3:a:imagemagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*
    • cpe:2.3:a:imagemagick:graphicsmagick:1.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:imagemagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:imagemagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*
  • ImageMagick/Imagemagick5 versions
    cpe:2.3:a:imagemagick:imagemagick:6.2.8.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:imagemagick:imagemagick:6.2.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:imagemagick:imagemagick:6.2.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:imagemagick:imagemagick:6.2.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:imagemagick:imagemagick:6.2.8.3:*:*:*:*:*:*:*
    • (no CPE)range: 6.2.4-5, 6.2.8-0
  • Graphicsmagick/Graphicsmagickllm-fuzzy
    Range: 1.1.7
  • osv-coords
    pkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Tumbleweed
    Range: < 1.3.36-1.7

Patches

Vulnerability mechanics

References

18

News mentions

0

No linked articles in our index yet.