CVE-2017-13132

In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service assertion failure in WriteBlobStream in MagickCore/blob.c via a crafted file...

CVE-2017-13133

In ImageMagick 7.0.6-8, the loadlevel function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service loadtile memory exhaustion via a crafted file...

CVE-2017-13134

In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file...

Code injection

mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring...

CVE-2017-13130

CVE-2017-13130 affects BMC Patrol (mcmnm) with a local privilege escalation in which a crafted libmcmclnx.so placed in the current working directory can be executed to gain elevated privileges. Root cause: the binary is setuid root and the RPATH starts with .: which enables an attacker-controlled...

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

libgig 4.0.0 LinuxSampler - Multiple Vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= https://www.linuxsampler.org/libgig/ libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS Downloadable Sounds Level...

Foxit Reader PDF Command Injection Remote Code Execution (CVE-2017-10951)

A remote code execution vulnerability has been reported in Foxit Reader. The vulnerability is due improper validation of a string before using it to execute a system call. A remote attacker could exploit this vulnerability by enticing a user to click a maliciously crafted file. Successful...

CVE-2017-13130

mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring...

GraphicsMagick buffer overflow vulnerability (CNVD-2017-237207)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'GetStyleTokens' function in coders/svg.c:311:12 in GraphicsMagick version 1.3.26. An attacker can exploit this...

DEBIAN-CVE-2017-13058

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-13059

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service WriteJNGImage memory consumption via a crafted file...

CVE-2017-13060

In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-13061

In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service ReadPSDImage memory exhaustion via a crafted file...

DEBIAN-CVE-2017-13059

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service WriteJNGImage memory consumption via a crafted file...

CVE-2017-13059

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service WriteJNGImage memory consumption via a crafted file...

DEBIAN-CVE-2017-13062

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service WriteMETAImage memory consumption via a crafted file...

Memory corruption

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service WriteMETAImage memory consumption via a crafted file...

Input validation

In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service ReadPSDImage memory exhaustion via a crafted file...

Memory corruption

In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-13062

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service WriteMETAImage memory consumption via a crafted file...