In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.
The product divides a value by zero.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Graphicsmagick | Graphicsmagick | 1.3.28 (including) | 1.3.28 (including) |
| Graphicsmagick | Ubuntu | artful | * |
| Graphicsmagick | Ubuntu | bionic | * |
| Graphicsmagick | Ubuntu | esm-apps/xenial | * |
| Graphicsmagick | Ubuntu | trusty | * |
| Graphicsmagick | Ubuntu | trusty/esm | * |
| Graphicsmagick | Ubuntu | upstream | * |
| Graphicsmagick | Ubuntu | xenial | * |