CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

PT-2018-3700

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-26 Q16 Description The issue is related to excessive iteration in the DecodeLabImage and EncodeLabImage functions of the coders/tiff.c component. This allows a remote attacker to cause a denial of service using a...

CVE-2018-9133: Excessive Iteration

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

PT-2018-10115

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-28 Description The issue is related to a memory leak in the WriteTIFFImage function located in coders/tiff.c. Recommendations For ImageMagick version 7.0.7-28, consider updating to a newer version that contains a fix...

CVE-2018-8960

CVE-2018-8960 affects ImageMagick 7.0.7-26 Q16 ReadTIFFImage (coders/tiff.c): memory is not properly restricted during allocation, causing a heap-based buffer over-read. NVD CVSSv3 base score 8.8 (HIGH) with network attack, no user interaction, and impacts to confidentiality/integrity/availabilit...

CVE-2018-8960: Out-of-bounds Read

The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read...

PT-2018-6756

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: An allocation failure issue was found in the ReadTIFFImage function, located in coders/tiff.c, which can lead to a denial of service when processing a crafted file. The issue arises because the file...

CVE-2017-18229: Allocation of Resources Without Limits or Throttling

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

PT-2018-3699

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-26 Q16 Description The issue is related to the ReadTIFFImage function in coders/tiff.c, which does not properly restrict memory allocation. This leads to a heap-based buffer over-read, potentially allowing a remote...

CVE-2018-7443: Allocation of Resources Without Limits or Throttling

The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote attackers to cause a denial of service memory allocation failure in the AcquireMagickMemory function in MagickCore/memory.c...

PT-2018-3698

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-23 Q16 Description The issue is related to the ReadTIFFImage function in the coders/tiff.c component, which does not properly validate the amount of image data in a file. This allows remote attackers to cause a denial...

CVE-2018-5360: Out-of-bounds Read

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

PT-2018-16917

Name of the Vulnerable Software and Affected Versions LibTIFF versions prior to 4.0.6 GraphicsMagick version 1.3.27 Description The issue is related to the mishandling of TIFF files, specifically a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c. Recommendations For...

CVE-2017-18028

In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file...

CVE-2017-18028: Allocation of Resources Without Limits or Throttling

In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file...

CVE-2017-17912

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region...

CVE-2017-17912: Out-of-bounds Read

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region...

CVE-2017-17912

CVE-2017-17912 affects GraphicsMagick (TIFF reader). The issue is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, where LocaleNCompare reads data beyond the allocated region, exposing potential denial of service or information disclosure as noted in multiple advisories. Connect...

PT-2017-15096

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.4 snapshot-20171217 Q8 Description The issue is related to a heap-based buffer over-read in the ReadNewsProfile function, located in coders/tiff.c. This occurs because LocaleNCompare reads data from the heap beyond the...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1155)

This update for GraphicsMagick fixes the following security issues : - CVE-2017-14532: NULL pointer Dereference in TIFFIgnoreTags in coders/tiff.c allowing for DoS bsc1059663 - CVE-2017-15033: Memory leak in ReadYUVImage could have allowed DoS boo1061873 %NASLMINLEVEL 70300 C Tenable Network...