This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-15139 →

DEBIAN-CVE-2019-15139

The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (appli...

Original description

The description as published by the source.

The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]

Debian:13 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]

Debian:14 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]

References

advisory security-tracker.debian.org