CVE-2018-5685

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

CVE-2018-5360

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

CVE-2018-5685

GraphicsMagick 1.3.27 is affected by CVE-2018-5685 due to a flaw in ReadBMPImage (coders/bmp.c) where processing a BMP image with a crafted bit-field mask value can cause an infinite loop, leading to denial of service. Public advisories note this affects GraphicsMagick and list fixed versions; De...

CVE-2018-5360

CVE-2018-5360 : LibTIFF before 4.0.6 has a heap-based buffer over-read in ReadTIFFImage (GraphicsMagick 1.3.27). Affects the TIFF handling path of LibTIFF; details in the GraphicsMagick/TIFF code path show the root cause. The public descriptions reference GraphicsMagick 1.3.27 and a heap-based ov...

CVE-2018-5685

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

CVE-2018-5360

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

CVE-2018-5685

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

CVE-2018-5360: Out-of-bounds Read

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

CVE-2018-5685: Loop with Unreachable Exit Condition

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

PT-2018-16917

Name of the Vulnerable Software and Affected Versions LibTIFF versions prior to 4.0.6 GraphicsMagick version 1.3.27 Description The issue is related to the mishandling of TIFF files, specifically a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c. Recommendations For...

PT-2018-3224 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.27 Description: The issue is related to an infinite loop in the ReadBMPImage function, which can cause an application hang. This can be exploited by remote attackers to cause a denial of service via a crafted image...

Debian: Security Advisory (DLA-547-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1231-1 : graphicsmagick security update

The NSFocus Security Team discovered multiple security issues in Graphicsmagick, a collection of image processing tools. Several heap-based buffer over-reads may lead to a denial of service application crash or possibly have other unspecified impact when processing a crafted file. For Debian 7...

[SECURITY] [DLA 1231-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u16 CVE ID : CVE-2017-17498 CVE-2017-17500 CVE-2017-17501 CVE-2017-17502 CVE-2017-17503 CVE-2017-17782 CVE-2017-17912 CVE-2017-17915 Debian Bug : 884905 The NSFocus Security Team discovered multiple security issues in Graphicsmagick, a collection ...

Debian: Security Advisory (DLA-1231-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-201801-7] graphicsmagick: multiple issues

Arch Linux Security Advisory ASA-201801-7 ========================================= Severity: High Date : 2018-01-08 CVE-ID : CVE-2017-11403 CVE-2017-12935 CVE-2017-12936 CVE-2017-12937 CVE-2017-13063 CVE-2017-13064 CVE-2017-13065 CVE-2017-13066 CVE-2017-13134 CVE-2017-13776 CVE-2017-13777...

DLA-1231-1 graphicsmagick - security update

Bulletin has no description...

GraphicsMagick 'ReadMNGImage' function buffer overflow vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'ReadMNGImage' function in the coders/png.c file in GraphicsMagick version 1.4 snapshot-20171217 Q8. A remote...

GraphicsMagick 'WriteWEBPImage' function buffer overflow vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'WriteWEBPImage' function in the coders/webp.c file in GraphicsMagick version 1.4 snapshot-20171217 Q8. A remot...

GraphicsMagick 'ReadNewsProfile' function buffer overflow vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'ReadNewsProfile' function of the coders/tiff.c file in GraphicsMagick version 1.4 snapshot-20171217 Q8. A remo...