PT-2018-1885 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.28 Description: The issue is related to a divide-by-zero error in the ReadMNGImage function of coders/png.c. This error can be triggered by remote attackers using a crafted mng file, potentially causing a crash and...

CVE-2018-9018: Divide By Zero

In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file...

graphicsmagick/enhance_fuzzer: Use-of-uninitialized-value in InsertRow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6546207443779584 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_PDB_fuzzer: Use-of-uninitialized-value in WritePDBImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5922301234118656 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPDBfuzzer Fuzz target binary: coderPDBfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_WBMP_fuzzer: Use-of-uninitialized-value in ReadWBMPImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4905768575827968 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWBMPfuzzer Fuzz target binary: coderWBMPfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-283)

This update for GraphicsMagick fixes the following issues : - CVE-2017-18230: Specially crafted CINEON images may have caused a NULL pointer dereference boo1085233 - CVE-2017-16353: Specially crafted MIFF images could have allowed for information disclosure boo1066170 - CVE-2017-16352: Specially...

graphicsmagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4647095681155072 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

GraphicsMagick 1.3.26 Multiple DoS Vulnerabilities - Linux

GraphicsMagick is prone to multiple Denial of Service vulnerabilities, exploitable via specially crafted files. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SUSE-SU-2018:0672-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2017-9405: A memory leak in the ReadICONImage function was fixed that could lead to DoS via memory exhaustion bsc1042911 - CVE-2017-11528: ReadDIBImage in coders/dib.c allows remote attackers to cause DoS via...

UBUNTU-CVE-2017-18231

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

DEBIAN-CVE-2017-18231

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-18229

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

Design/Logic Flaw

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

Null pointer dereference

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-18230

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-18230

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

DEBIAN-CVE-2017-18230

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-18230

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

Null pointer dereference

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-18230

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...