GraphicsMagick Denial of Service Vulnerability (CNVD-2016-09853)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in GraphicsMagick 1.3.25 and earlier versions, which can be exploited by an attacker to cause the application to...

Amazon Linux AMI : GraphicsMagick (ALAS-2016-752)

A possible heap overflow was discovered in the EscapeParenthesis function CVE-2016-7447. Various issues were found in the processing of SVG files in GraphicsMagick CVE-2016-7446. The TIFF reader had a bug pertaining to use of TIFFGetField when a 'count' value is returned. The bug caused a heap re...

GraphicsMagick Null Pointer Denial of Service Vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in GraphicsMagick 1.3.25 and earlier versions, which can be exploited by an attacker to crash the application and...

Debian DLA-651-1 : graphicsmagick security update

Various security issues were found and fixed in graphicsmagick in Debian wheezy LTS. CVE-2016-7446 Heap buffer overflow issue in MVG/SVG rendering. CVE-2016-7447 Heap overflow of the EscapeParenthesis function CVE-2016-7449 TIFF related problems due to use of strlcpy use. CVE-2016-7800 Fix unsign...

[SECURITY] [DLA 651-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u4 CVE ID : CVE-2016-7446 CVE-2016-7447 CVE-2016-7449 CVE-2016-7800 Debian Bug : Various security issues were found and fixed in graphicsmagick in Debian wheezy LTS. CVE-2016-7446 Heap buffer overflow issue in MVG/SVG rendering. CVE-2016-7447 Heap...

DLA-651-1 graphicsmagick - security update

Bulletin has no description...

GraphicsMagick Heap Overflow Vulnerability

GraphicsMagick is the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries. GraphicsMagick WPG format reader fails to check if a color mapping table entry is greater than 256, leading to a potential heap overflow...

GraphicsMagick Heap Buffer Overflow Vulnerability

GraphicsMagick is a simple set of image processing tools. A heap buffer overflow vulnerability exists in GraphicsMagick 8BIM/8BIMW, which could be exploited by an attacker to execute arbitrary script and code in the context of an affected program...

PT-2017-3831

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.3.25 and earlier Description The issue is related to an integer underflow in the parse8BIM function, located in coders/meta.c, which can lead to a heap-based buffer overflow. This can be exploited by a remote attacker...

PT-2017-3832

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.3.25 and earlier Description The issue is related to the WPG format reader in GraphicsMagick, which allows remote attackers to cause a denial of service. This can be achieved through vectors related to a ReferenceBlob...

PT-2016-3279

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.3.25 and earlier Description The issue is related to a heap-based buffer overflow in the WPG format reader, which can be exploited by remote attackers using a colormap with a large number of entries. This may allow an...

Updated graphicsmagick packages fix security vulnerability

A possible heap overflow of the EscapeParenthesis function CVE-2016-7447. The Utah RLE reader did not validate that header information was reasonable given the file size and so it could cause huge memory allocations and/or consume huge amounts of CPU CVE-2016-7448. The TIFF reader had a bug...

PT-2017-9188

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions prior to 1.3.25 Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption or large memory allocations, by exploiting vectors involving the header information and the file...

PT-2017-9187

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions prior to 1.3.25 Description A heap-based buffer overflow issue exists in the EscapeParenthesis function, allowing remote attackers to have an unspecified impact. The exact vectors used for the attack are unknown...

PT-2017-9189

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.24 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a file with an "unterminated" string. This is related to the TIFFGetField function ...

[SECURITY] Fedora 23 Update: GraphicsMagick-1.3.25-1.fc23

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

GraphicsMagick Heap Buffer Overflow Vulnerability

GraphicsMagick is a simple set of image processing tools. A heap overflow vulnerability exists in the EscapeParenthesis function used in the text comment code of GraphicsMagick, which can be exploited by an attacker to execute arbitrary code...

GraphicsMagick has multiple vulnerabilities (CNVD-2016-07921)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. Heap buffer overflow, denial of service, and heap out-of-bounds read vulnerabilities exist in versions of GraphicsMagick prior to 1.3.25. A remote attacker c...

GraphicsMagick heap buffer overflow vulnerability (CNVD-2016-08036)

GraphicsMagick is a simple set of image processing tools. GraphicsMagick suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

Multiple vulnerabilities in GraphicsMagick

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. Heap buffer overflow, denial of service, and heap out-of-bounds read vulnerabilities exist in versions of GraphicsMagick prior to 1.3.25. A remote attacker c...