CVE-2017-17498

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service bitstream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-17500

GraphicsMagick 1.3.26 is affected by CVE-2017-17500 due to a heap-based buffer over-read in ReadRGBImage (coders/rgb.c) triggered by a crafted image. The root cause is an error in ImportRGBQuantumType handling that can lead to out-of-bounds reads, with high impact on confidentiality, integrity an...

CVE-2017-17501

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

CVE-2017-17502

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17500

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17500

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17502

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17502

GraphicsMagick 1.3.26 contains a vulnerability in ReadCMYKImage (coders/cmyk.c): a heap-based buffer over-read triggered by a crafted file. Impact per the entry includes partial confidentiality, integrity, and availability. The available data do not specify affected platforms/versions beyond Grap...

CVE-2017-17500

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17501

Technical details about CVE-2017-17501 are not provided in the connected documents. Monitor for updates.

CVE-2017-17503

CVE-2017-17503 affects GraphicsMagick 1.3.26: ReadGRAYImage in coders/gray.c allows a heap-based buffer over-read via a crafted file. Connected advisories (USN-4248-1, Debian DSA-4321-1) document multiple GraphicsMagick flaws and require upgrading to fixed releases (e.g., Debian stretch fix to 1....

CVE-2017-17498

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service bitstream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-17501

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2017:3223-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for GraphicsMagick (important)

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2017-16546: Fix ReadWPGImage function in coders/wpg.c that could lead to a denial of service bsc1067181. - CVE-2017-14342: Fix a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c that could lead ...

SUSE-SU-2017:3056-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2017-15033: A denial of service attack memory leak in ReadYUVImage in coders/yuv.c was fixed bsc1061873 - CVE-2017-13063: A heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c was fixed bsc1055050...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1276)

This update for GraphicsMagick fixes the following security issues : - CVE-2017-13776: denial of service issue in ReadXBMImage in a coders/xbm.c bsc1056429 - CVE-2017-13777: denial of service issue in ReadXBMImage in a coders/xbm.c bsc1056426 - CVE-2017-13134: heap-based buffer over-read allowing...

[SECURITY] [DLA 1170-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u15 CVE ID : CVE-2017-13134 CVE-2017-16547 Debian Bug : 881524 Security vulnerabilities have been identified in graphicsmagick, a collection of image processing utilities and libraries. CVE-2017-13134 Graphicsmagick was vulnerable to a heap-based...

DLA-1170-1 graphicsmagick - security update

Bulletin has no description...

Debian DLA-1170-1 : graphicsmagick security update

Security vulnerabilities have been identified in graphicsmagick, a collection of image processing utilities and libraries. CVE-2017-13134 Graphicsmagick was vulnerable to a heap-based buffer over-read and denial of service via a crafted SFW file. CVE-2017-16547 Graphicsmagick was vulnerable to a...