CVE-2017-16547

The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application crash or possibly have unspecified other impact via a...

CVE-2017-16547

The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application crash or possibly have unspecified other impact via a...

CVE-2017-16545

The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service ImportIndexQuantumType invalid write and application crash or possibly have unspecified other impact via a malformed WPG ima...

CVE-2017-16545

CVE-2017-16545 affects GraphicsMagick 1.3.26, where the ReadWPGImage function in coders/wpg.c does not properly validate color-mapped images. This can lead to a remote denial of service (ImportIndexQuantumType invalid write) or possibly other unspecified impact when processing a malformed WPG ima...

CVE-2017-16545

The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service ImportIndexQuantumType invalid write and application crash or possibly have unspecified other impact via a malformed WPG ima...

GraphicsMagick heap buffer overflow vulnerability (CNVD-2017-34467)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A heap-based buffer overflow vulnerability exists in the presentation of the visual image catalog in the 'DescribeImage' function of the magick/describe.c fi...

GraphicsMagick Memory Misreference Vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A memory misreference vulnerability exists in the 'ReadOneJNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. An attacker can explo...

CVE-2017-14994

ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted DICOM image, related to the ability of DCMReadNonNativeImages to yield an image list with zero frames...

CVE-2017-14997

GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service excessive memory allocation because of an integer underflow in ReadPICTImage in coders/pict.c...

CVE-2017-14997

GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service excessive memory allocation because of an integer underflow in ReadPICTImage in coders/pict.c...

CVE-2017-14997

CVE-2017-14997 affects GraphicsMagick (notably the 1.3.26 release in the provided description) due to an integer underflow in ReadPICTImage (coders/pict.c) that allows a remote attacker to trigger a denial of service via excessive memory allocation. The connected documents corroborate that this C...

GraphicsMagick coders/rle.c file denial of service vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the ReadRLEImage of the coders/rle.c file in GraphicsMagick version 1.3.26, which fails to properly handle RLE packet...

CVE-2017-14733

ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-14733

CVE-2017-14733 affects GraphicsMagick 1.3.26 where ReadRLEImage in coders/rle.c mishandles RLE headers that specify too few colors, enabling a heap-based buffer over-read and a denial of service via a crafted image. Connected advisories indicate the issue was addressed in later GraphicsMagick rel...

CVE-2017-14733

ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

GraphicsMagick 'DrawImage' Function Denial of Service Vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'DrawImage' function of the magick/render.c file in GraphicsMagick version 1.3.26. A remote attacker can exploit this...

UBUNTU-CVE-2017-14314

Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service DrawDashPolygon heap-based buffer over-read and application crash via a crafted file...

CVE-2017-14314

GraphicsMagick 1.3.26 is affected by CVE-2017-14314 due to an off-by-one error in DrawImage (magick/render.c) that can trigger a heap-based buffer over-read, enabling remote denial of service via a crafted image. Public advisories (Debian DSA-4321-1, USN-4232-1) confirm this family of issues and ...

CVE-2017-14314

Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service DrawDashPolygon heap-based buffer over-read and application crash via a crafted file...

GraphicsMagick 'ReadSUNImage' Function Denial of Service Vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadSUNImage' function in the coders/sun.c file in GraphicsMagick version 1.3.26. An attacker can exploit this...