2721 matches found
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A heap overflow in the WriteCMYKImage function in coders/cmyk.c during processing of multiple frames that have non-identical widths allows an attacker to execute arbitrary code on the host OS...
Denial Of Service (DoS)
GraphicsMagick is vulnerable to denial of service. An attacker is able to crash the application via the ReadXBMImage function in coders/xbm.c by submitting a "Read hex image data" version!=10 case that will result in the reader not returning and causing large amounts of CPU and memory consumption...
Arbitrary Code Execution
graphicsmagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WritePNMImage in coders/pnm.c allows remote attackers to crash the application via a malicious file...
Arbitrary Code Execution
graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, when LocaleNCompare reads heap data beyond the allocated region...
Arbitrary Code Execution
GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in ReadOneJNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS...
Denial Of Service (DoS)
graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists in ReadJNXImage in coders/jnx.c through large amounts of CPU and memory resources consumed even if the file itself does not support the requests...
Arbtirary Code Execution
graphicsmagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS via a malicious file...
graphicsmagick:coder_CRW_fuzzer: Use-of-uninitialized-value in MagickCondSignal
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5676670342922240 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCRWfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
The vulnerability in the implementation of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created image...
OPENSUSE-SU-2020:0788-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271 This update was imported from the openSUSE:Leap:15.1:Update update project...
Security update for GraphicsMagick (moderate)
openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2020:0788-1 Rating: moderate References: 1171271 Cross-References: CVE-2020-12672 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This...
openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2020:0779-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : GraphicsMagick (openSUSE-2020-779)
This update for GraphicsMagick fixes the following issues : - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Security update for GraphicsMagick (moderate)
openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2020:0779-1 Rating: moderate References: 1171271 Cross-References: CVE-2020-12672 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...
Debian DLA-2236-1 : graphicsmagick security update
A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images. For Debian 8 'Jessie', this problem has been fixed in version 1.3.20-3+deb8u11. We recommend that you upgrade your graphicsmagick packages...
Debian: Security Advisory (DLA-2236-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2020:0779-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271...
[SECURITY] [DLA 2236-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.20-3+deb8u11 CVE ID : CVE-2020-12672 Debian Bug : 960000 A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images. For Debian 8 "Jessie", this problem has bee...
graphicsmagick:coder_WPG_fuzzer: Unknown signal in DestroyImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5660982914580480 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type: Unknown signal Crash Address...