Vulnerabilities > CVE-2020-12672 - Out-of-bounds Write vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

nessus

NVD

Published: 2020-05-06

Updated: 2024-11-21

Summary

GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.

Vulnerable Configurations

Part	Description	Count
Application	Graphicsmagick Graphicsmagick Graphicsmagick - Graphicsmagick Graphicsmagick 1.0 Graphicsmagick Graphicsmagick 1.0.1 Graphicsmagick Graphicsmagick 1.0.2 Graphicsmagick Graphicsmagick 1.0.3 Graphicsmagick Graphicsmagick 1.0.4 Graphicsmagick Graphicsmagick 1.0.5 Graphicsmagick Graphicsmagick 1.0.6 Graphicsmagick Graphicsmagick 1.1 Graphicsmagick Graphicsmagick 1.1.1 Graphicsmagick Graphicsmagick 1.1.2 Graphicsmagick Graphicsmagick 1.1.3 Graphicsmagick Graphicsmagick 1.1.4 Graphicsmagick Graphicsmagick 1.1.5 Graphicsmagick Graphicsmagick 1.1.6 Graphicsmagick Graphicsmagick 1.1.7 Graphicsmagick Graphicsmagick 1.1.8 Graphicsmagick Graphicsmagick 1.1.9 Graphicsmagick Graphicsmagick 1.1.10 Graphicsmagick Graphicsmagick 1.1.11 Graphicsmagick Graphicsmagick 1.1.12 Graphicsmagick Graphicsmagick 1.1.13 Graphicsmagick Graphicsmagick 1.1.14 Graphicsmagick Graphicsmagick 1.2 Graphicsmagick Graphicsmagick 1.2.1 Graphicsmagick Graphicsmagick 1.2.2 Graphicsmagick Graphicsmagick 1.2.3 Graphicsmagick Graphicsmagick 1.2.4 Graphicsmagick Graphicsmagick 1.2.5 Graphicsmagick Graphicsmagick 1.2.6 Graphicsmagick Graphicsmagick 1.2.7 Graphicsmagick Graphicsmagick 1.2.18 Graphicsmagick Graphicsmagick 1.3 Graphicsmagick Graphicsmagick 1.3.1 Graphicsmagick Graphicsmagick 1.3.2 Graphicsmagick Graphicsmagick 1.3.3 Graphicsmagick Graphicsmagick 1.3.4 Graphicsmagick Graphicsmagick 1.3.5 Graphicsmagick Graphicsmagick 1.3.6 Graphicsmagick Graphicsmagick 1.3.7 Graphicsmagick Graphicsmagick 1.3.8 Graphicsmagick Graphicsmagick 1.3.9 Graphicsmagick Graphicsmagick 1.3.10 Graphicsmagick Graphicsmagick 1.3.11 Graphicsmagick Graphicsmagick 1.3.12 Graphicsmagick Graphicsmagick 1.3.13 Graphicsmagick Graphicsmagick 1.3.14 Graphicsmagick Graphicsmagick 1.3.15 Graphicsmagick Graphicsmagick 1.3.16 Graphicsmagick Graphicsmagick 1.3.17 Graphicsmagick Graphicsmagick 1.3.18 Graphicsmagick Graphicsmagick 1.3.19 Graphicsmagick Graphicsmagick 1.3.20 Graphicsmagick Graphicsmagick 1.3.21 Graphicsmagick Graphicsmagick 1.3.22 Graphicsmagick Graphicsmagick 1.3.23 Graphicsmagick Graphicsmagick 1.3.24 Graphicsmagick Graphicsmagick 1.3.25 Graphicsmagick Graphicsmagick 1.3.26 Graphicsmagick Graphicsmagick 1.3.27 Graphicsmagick Graphicsmagick 1.3.27A Graphicsmagick Graphicsmagick 1.3.28 Graphicsmagick Graphicsmagick 1.3.29 Graphicsmagick Graphicsmagick 1.3.30 Graphicsmagick Graphicsmagick 1.3.31 Graphicsmagick Graphicsmagick 1.3.32 Graphicsmagick Graphicsmagick 1.3.33 Graphicsmagick Graphicsmagick 1.3.34 Graphicsmagick Graphicsmagick 1.3.35	69
Application	Opensuse Opensuse Backports SLE 15.0	1
OS	Debian Debian Debian Linux 8.0	1
OS	Opensuse Opensuse Leap 15.1	1

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Nessus

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DLA-2236.NASL
description	A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images. For Debian 8
last seen	2020-06-11
modified	2020-06-08
plugin id	137206
published	2020-06-08
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137206
title	Debian DLA-2236-1 : graphicsmagick security update

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2020-779.NASL
description	This update for GraphicsMagick fixes the following issues : - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. (boo#1171271)
last seen	2020-06-11
modified	2020-06-08
plugin id	137228
published	2020-06-08
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137228
title	openSUSE Security Update : GraphicsMagick (openSUSE-2020-779)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Nessus

References