« Volver al listado

CVE-2008-1097

Estado: ModificadaMedia (6.8)—

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Imagemagick — GraphicsmagickImagemagick — Imagemagick

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-1097",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-03-05T20:44:00.000",
  "references": [
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413034",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/43213",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/29786",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/29857",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/30967",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/36260",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/55721",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-201311-10.xml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2009/dsa-1858",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:099",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0145.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0165.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/28822",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1019881",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=285861",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41193",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11237",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=413034",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/43213",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/29786",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/29857",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/30967",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/36260",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/55721",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-201311-10.xml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2009/dsa-1858",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:099",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0145.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0165.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/28822",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1019881",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=285861",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41193",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11237",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline array, leading to memory corruption."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en montículo en la función ReadPCXImage del codificador PCX de coders/pcx.c en (1) ImageMagick 6.2.4-5 y 6.2.8-0 y (2) GraphicsMagick (también conocido  como gm) 1.1.7 permite a atacantes remotos con la complicidad del usuario provocar una denegación de servicio (caída) o posiblemente ejecutar código de su elección a través del fichero .pcx que dispara una asignación incorrecta de memoria para el array scanline, provocando corrupción de memoria.\r\n"
    }
  ],
  "lastModified": "2026-06-16T22:50:59.110",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:imagemagick:graphicsmagick:1.1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAB9E1C7-BCB2-43FF-8CAB-D48EFE723763"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:graphicsmagick:1.1.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E32122CF-7871-479D-8C7E-BE5851C31898"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:graphicsmagick:1.1.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CF70195-5B78-4DA9-9EF4-2E39C03D8DEE"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D742E790-2ED6-4EBB-8C49-277EB1D73EC6"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:graphicsmagick:1.1.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0D10F27-B453-4550-9B63-57D2CEB8F65E"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:graphicsmagick:1.1.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAF8A137-C144-427A-897E-5C3A3C2D5DA4"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:6.2.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2796AA1-61E5-46E4-B28F-358A49E0B3D1"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:6.2.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C38A3C0A-0A0A-4433-82BA-AE4D3943E25C"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:6.2.8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C82A613A-1973-434E-81C5-C2A546C48A4B"
            },
            {
              "criteria": "cpe:2.3:a:imagemagick:imagemagick:6.2.8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72E2AF1B-85A6-4109-83D9-76A44E8DD6E0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}