CVE-2013-4298
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers...
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
Exploit likelihood
What each source reports
NVD Score used
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
- Record
CVE-2013-4298- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
- Record
CVE-2013-4298- Updated
- 2026-11-02
EUVDEUVD-2013-4192 No score
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
- Record
EUVD-2013-4192- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m2r5-w7hg-5233 No score
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers...
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
- Record
GHSA-m2r5-w7hg-5233- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
- Record
CVE-2013-4298- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4298 No score
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.
- Record
DEBIAN-CVE-2013-4298- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickDebian:12 |
before 8:6.7.7.10-6 | 8:6.7.7.10-6 |
imagemagickDebian:13 |
before 8:6.7.7.10-6 | 8:6.7.7.10-6 |
imagemagickDebian:14 |
before 8:6.7.7.10-6 | 8:6.7.7.10-6 |
imagemagickDebian:7 |
before 8:6.7.7.10-5+deb7u2, plus listed versions 8:6.7.7.10-5 |
8:6.7.7.10-5+deb7u2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4298 is a medium vulnerability (CVSS 4.3) in Imagemagick, published September 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.69%, the 91st percentile. Fixed in imagemagick 8:6.7.7.10-6.