CVE-2016-7996

Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries...

CVE-2016-7997

The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service assertion failure and crash via vectors related to a ReferenceBlob and a NULL pointer...

CVE-2016-7996

Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries...

CVE-2016-7997

The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service assertion failure and crash via vectors related to a ReferenceBlob and a NULL pointer...

CVE-2016-7997: NULL Pointer Dereference

The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service assertion failure and crash via vectors related to a ReferenceBlob and a NULL pointer...

CVE-2016-7996: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries...

GraphicsMagick and ImageMagick popen() Command Execution (CVE-2016-5118)

A remote code execution vulnerability exists in ImageMagick and GraphicsMagick. The vulnerability is due to an error in the way the programs handle specially crafted files. A remote attacker can exploit this issue by enticing a user to open a specially crafted file that could run arbitrary code i...

Debian DSA-3746-1 : graphicsmagick - security update (ImageTragick)

Several vulnerabilities have been discovered in GraphicsMagick, a collection of image processing tool, which can cause denial of service attacks, remote file deletion, and remote command execution. This security update removes the full support of PLT/Gnuplot decoder to prevent Gnuplot-shell based...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-1511)

This security update for GraphicsMagick fixes the following issues : - a memory allocation failure was fixed CVE-2016-8866, boo1009318 - maliciously crafted jng files could crash the identify utility CVE-2016-9830, boo1013640 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

[SECURITY] [DSA 3746-1] graphicsmagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3746-1 [email protected] https://www.debian.org/security/ Luciano Bello December 24, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3746-1] graphicsmagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3746-1 [email protected] https://www.debian.org/security/ Luciano Bello December 24, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3746-1 (graphicsmagick - security update)

Several vulnerabilities have been discovered in GraphicsMagick, a collection of image processing tool, which can cause denial of service attacks, remote file deletion, and remote command execution. This security update removes the full support of PLT/Gnuplot decoder to prevent Gnuplot-shell based...

PT-2017-3833

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.25 Description The issue exists due to insufficient input validation in the MagickRealloc function, allowing a remote attacker to cause a denial of service by crashing the system with large dimensions in a jpeg image...

DSA-3746-1 graphicsmagick - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-1430)

This update for GraphicsMagick fixes the following issues : - a possible shell execution attack was fixed. if the first character of an input filename for 'convert' was a '|' then the remainder of the filename was passed to the shell CVE-2016-5118, boo982178 - Maliciously crafted pnm files could...

Security update for GraphicsMagick (important)

This update for GraphicsMagick fixes the following issues: - a possible shell execution attack was fixed. if the first character of an input filename for 'convert' was a '|' then the remainder of the filename was passed to the shell CVE-2016-5118, boo982178 - Maliciously crafted pnm files could...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-1414)

This update for GraphicsMagick fixes the following security issues : - CVE-2016-9556: Maliciously crafted image headers could cause denial of service in image format detection routines boo1011130 - CVE-2016-9559: Maliciously crafted image headers could cause denial of service in image format...

openSUSE Security Update : ImageMagick (openSUSE-2016-1413)

This update for GraphicsMagick fixes the following security issues : - CVE-2016-9556: Maliciously crafted image headers could cause denial of service in image format detection routines boo1011130 - CVE-2016-9559: Maliciously crafted image headers could cause denial of service in image format...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-1415)

This update for GraphicsMagick fixes the following security issues : - CVE-2016-9556: Maliciously crafted image headers could cause denial of service in image format detection routines boo1011130 - CVE-2016-9559: Maliciously crafted image headers could cause denial of service in image format...