Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WritePNMImage in coders/pnm.c allows remote attackers to crash the application via a malicious file...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, when LocaleNCompare reads heap data beyond the allocated region...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in ReadOneJNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists in ReadJNXImage in coders/jnx.c through large amounts of CPU and memory resources consumed even if the file itself does not support the requests...

Arbtirary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code on the host OS via a malicious file...

graphicsmagick:coder_CRW_fuzzer: Use-of-uninitialized-value in MagickCondSignal

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5676670342922240 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCRWfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

The vulnerability in the implementation of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created image...

OPENSUSE-SU-2020:0788-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271 This update was imported from the openSUSE:Leap:15.1:Update update project...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2020:0788-1 Rating: moderate References: 1171271 Cross-References: CVE-2020-12672 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2020:0779-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : GraphicsMagick (openSUSE-2020-779)

This update for GraphicsMagick fixes the following issues : - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2020:0779-1 Rating: moderate References: 1171271 Cross-References: CVE-2020-12672 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Debian DLA-2236-1 : graphicsmagick security update

A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images. For Debian 8 'Jessie', this problem has been fixed in version 1.3.20-3+deb8u11. We recommend that you upgrade your graphicsmagick packages...

Debian: Security Advisory (DLA-2236-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2020:0779-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271...

[SECURITY] [DLA 2236-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u11 CVE ID : CVE-2020-12672 Debian Bug : 960000 A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images. For Debian 8 "Jessie", this problem has bee...

graphicsmagick:coder_WPG_fuzzer: Unknown signal in DestroyImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5660982914580480 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type: Unknown signal Crash Address...

DLA-2236-1 graphicsmagick - security update

Bulletin has no description...

graphicsmagick:coder_WPG_fuzzer: Heap-buffer-overflow in InsertRow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6005768108376064 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

graphicsmagick:enhance_fuzzer: Heap-buffer-overflow in ImportGrayQuantumType

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5190117580079104 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE...