Lucene search

K
freebsdFreeBSD98690C45-0361-11E2-A391-000C29033C32
HistoryJul 28, 2012 - 12:00 a.m.

ImageMagick and GraphicsMagick -- DoS via specially crafted PNG file

2012-07-2800:00:00
vuxml.freebsd.org
17

0.832 High

EPSS

Percentile

98.4%

Kurt Seifried reports:

There is an issue in ImageMagick that is also present in
GraphicsMagick. CVE-2011-3026 deals with libpng memory
allocation, and limitations have been added so that a bad PNG
can’t cause the system to allocate a lot of memory and a
denial of service. However on further investigation of
ImageMagick, Tom Lane found that PNG malloc function
(Magick_png_malloc) in turn calls AcquireMagickMemory with an
improper size argument.