CVE-2017-10794: Improper Restriction of Operations within the Bounds of a Memory Buffer

When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...

PT-2017-3834

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.25 Description The issue is related to a buffer overflow in the dynamic memory of the coders/tiff.c component of the GraphicsMagick library when processing an RGB TIFF picture. This can be exploited by a remote...

SUSE-SU-2017:1600-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: This security issue was fixed: - CVE-2017-7941: The ReadSGIImage function in sgi.c allowed remote attackers to consume an amount of available memory via a crafted file bsc1034876. - CVE-2017-8351: ImageMagick, GraphicsMagick: denial of...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-664)

This update for GraphicsMagick fixes the following issues : - CVE-2017-9142: missing checks in theReadOneJNGImage function in coders/png.c could trigger an assertion failure boo1040304 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DLA-953-1 : graphicsmagick security update

Chris Evans discovered that graphicsmagick used uninitialized memory in the RLE decoder, allowing an remote attacker to leak sensitive information from process memory space. More information are available at: https://scarybeastsecurity.blogspot.de/2017/05/bleed-continues-18-byte...

[SECURITY] [DLA 953-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u7 CVE ID : CVE-2017-9098 Debian Bug : 862967 Chris Evans discovered that graphicsmagick used uninitialized memory in the RLE decoder, allowing an remote attacker to leak sensitive information from process memory space. More information are...

DLA-953-1 graphicsmagick - security update

Bulletin has no description...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-616)

This update for GraphicsMagick fixes the following issues : - CVE-2017-8350: denial of service via crafted PNG file boo1036985 - CVE-2017-8351: denial of service via crafted PCD file boo1036986 - CVE-2017-8353: denial of service via crafted PICT file boo1036988 - CVE-2017-8355: denial of service...

Design/Logic Flaw

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

CVE-2017-9098

CVE-2017-9098 affects ImageMagick prior to 7.0.5-2 and GraphicsMagick prior to 1.3.24. The vulnerability stems from uninitialized memory in the RLE decoder ReadRLEImage, caused by a missing initialization step in coders/rle.c. This can allow an attacker to leak sensitive process memory from a lon...

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

CVE-2017-9098: Use of Uninitialized Resource

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...

PT-2017-18701

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.5-2 GraphicsMagick versions prior to 1.3.24 Description The issue allows an attacker to leak sensitive information from process memory space due to the use of uninitialized memory in the RLE decoder. This can ...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-538)

This update for GraphicsMagick fixes one issue. This security issue was fixed : - CVE-2017-7941: The ReadSGIImage function in sgi.c in ImageMagick allowed remote attackers to consume an amount of available memory via a crafted file boo1034876. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Amazon Linux AMI : GraphicsMagick (ALAS-2017-820)

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file.CVE-2017-6335 The WPG format reader in GraphicsMagick 1.3.2...