[ GLSA 201311-10 ] GraphicsMagick: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: GraphicsMagick: Multiple vulnerabilities (GLSA 201311-10)
Severity: normal
Exploitable: remote
Date: November 19, 2013
Bug(s): #365769, #488050
ID: 201311-10

Synopsis

Multiple vulnerabilities have been found in GraphicsMagick,
allowing remote attackers to execute arbitrary code or cause a Denial of
Service condition.


Background

GraphicsMagick is the Swiss army knife of image processing.

Affected Packages

Package: media-gfx/graphicsmagick
Vulnerable: < 1.3.18
Unaffected: >= 1.3.18
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in GraphicsMagick. Please
review the CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to open a specially-crafted image
file, potentially resulting in arbitrary code execution or a Denial of
Service condition.


Workaround

There is no known workaround at this time.

Resolution

All GraphicsMagick users should upgrade to the latest version: