CVE-2005-1739

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-24 · updated 2026-06-16

Description

The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask.

Affected products

GraphicsMagick: 1.0, 1.0.6, 1.1, 1.1.3, 1.1.4, 1.1.5 (+1)
ImageMagick: 5.3.3, 5.3.8, 5.4.3, 5.4.4.5, 5.4.7, 5.4.8 (+30)

References

http://bugs.gentoo.org/show_bug.cgi?id=90423
http://secunia.com/advisories/15429
http://secunia.com/advisories/15446
http://secunia.com/advisories/15453
http://security.gentoo.org/glsa/glsa-200505-16.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:107
http://www.osvdb.org/16774
http://www.osvdb.org/16775
http://www.redhat.com/support/errata/RHSA-2005-480.html
http://www.securityfocus.com/bid/13705
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11667
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A960

Get alerted when CVE-2005-1739 or the next vulnerability affects your stack