Ruby Gem Minimagic Command Execution

MiniMagic ruby gem remote code execution 3/12/2013 https://github.com/hcatlin/minimagick A ruby wrapper for ImageMagick or GraphicsMagick command line. Tested on both Ruby 1.9.2 and Ruby 1.8.7. If a URL is from an untrusted source, commands can be injected into it for remote code execution with...

Ruby Gem Minimagic Command Execution Vulnerability

Ruby Gem MiniMagic suffers from a remote command execution vulnerability due to a lack of user input sanitization. MiniMagic ruby gem remote code execution 3/12/2013 https://github.com/hcatlin/minimagick A ruby wrapper for ImageMagick or GraphicsMagick command line. Tested on both Ruby 1.9.2 and...

graphicsmagick memory corruption

Memory corruption on PNG parsing...

Mandriva Update for graphicsmagick MDVSA-2012:165 (graphicsmagick)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for graphicsmagick MDVSA-2012:165 (graphicsmagick)

Check for the Version of graphicsmagick OpenVAS Vulnerability Test Mandriva Update for graphicsmagick MDVSA-2012:165 graphicsmagick Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Linux Security Advisory : graphicsmagick (MDVSA-2012:165)

A vulnerability has been found and corrected in graphicsmagick : The Magickpngmalloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service crash via a crafted PNG file that...

FreeBSD Ports: ImageMagick, ImageMagick-nox11

The remote host is missing an update to the system as announced in the referenced advisory. VID 98690c45-0361-11e2-a391-000c29033c32 OpenVAS Vulnerability Test $ Description: Auto generated from VID 98690c45-0361-11e2-a391-000c29033c32 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: ImageMagick, ImageMagick-nox11

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : ImageMagick and GraphicsMagick -- DoS via specially crafted PNG file (98690c45-0361-11e2-a391-000c29033c32)

Kurt Seifried reports : There is an issue in ImageMagick that is also present in GraphicsMagick. CVE-2011-3026 deals with libpng memory allocation, and limitations have been added so that a bad PNG can't cause the system to allocate a lot of memory and a denial of service. However on further...

Fedora 18 : GraphicsMagick-1.3.16-5.fc18 (2012-12333)

This update : - addresses a potential memory allocation issue with png images - fixes a -devel multilib conflict - builds against lcms2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

[SECURITY] Fedora 18 Update: GraphicsMagick-1.3.16-5.fc18

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

Fedora Update for GraphicsMagick FEDORA-2012-12352

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for GraphicsMagick FEDORA-2012-12352

Check for the Version of GraphicsMagick OpenVAS Vulnerability Test Fedora Update for GraphicsMagick FEDORA-2012-12352 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Fedora Update for GraphicsMagick FEDORA-2012-12366

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for GraphicsMagick FEDORA-2012-12366

Check for the Version of GraphicsMagick OpenVAS Vulnerability Test Fedora Update for GraphicsMagick FEDORA-2012-12366 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Fedora 16 : GraphicsMagick-1.3.16-5.fc16 (2012-12366)

This update : - addresses a potential memory allocation issue with png images - fixes a -devel multilib conflict - builds against lcms2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

Fedora 17 : GraphicsMagick-1.3.16-5.fc17 (2012-12352)

This update : - addresses a potential memory allocation issue with png images - fixes a -devel multilib conflict - builds against lcms2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

[SECURITY] Fedora 17 Update: GraphicsMagick-1.3.16-5.fc17

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

[SECURITY] Fedora 16 Update: GraphicsMagick-1.3.16-5.fc16

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

DEBIAN-CVE-2012-3438

The Magickpngmalloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service crash via a crafted PNG file that triggers incorrect memory allocation...