924 matches found
CVE-2005-0761
Unknown vulnerability in ImageMagick before 6.1.8 allows remote attackers to cause a denial of service application crash via a crafted PSD file...
CVE-2005-0397
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by...
GLSA-200503-11 : ImageMagick: Filename handling vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-11 ImageMagick: Filename handling vulnerability Tavis Ormandy of the Gentoo Linux Security Audit Team has identified a flaw in the handling of filenames by the ImageMagick utilities. Impact : Successful exploitation may...
ImageMagick: Filename handling vulnerability
Background ImageMagick is a collection of tools and libraries for manipulating a wide variety of image formats. Description Tavis Ormandy of the Gentoo Linux Security Audit Team has identified a flaw in the handling of filenames by the ImageMagick utilities. Impact Successful exploitation may...
USN-90-1: Imagemagick vulnerability
Tavis Ormandy discovered a format string vulnerability in ImageMagick's file name handling. Specially crafted file names could cause a program using ImageMagick to crash, or possibly even cause execution of arbitrary code. Since ImageMagick can be used in custom printing systems, this also might...
CVE-2004-0981
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file...
[SECURITY] [DSA 646-1] New ImageMagick packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 646-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...
USN-62-1: imagemagick vulnerability
Andrei Nigmatulin discovered a potential buffer overflow in the PhotoShop Document image decoding function of ImageMagick. Decoding a malicious PSD image which specifies more than the allowed 24 channels might result in execution of arbitrary code with the user's privileges. Since ImageMagick can...
Debian DSA-646-1 : imagemagick - buffer overflow
Andrei Nigmatulin discovered a buffer overflow in the PSD image-decoding module of ImageMagick, a commonly used image manipulation library. Remote exploitation with a carefully crafted image could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[Full-Disclosure] iDEFENSE Security Advisory 01.17.05: Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability
Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability iDEFENSE Security Advisory 01.17.05 www.idefense.com/application/poi/display?id=184&type=vulnerabilities January 17, 2005 I. BACKGROUND ImageMagick provides a variety of graphics image-handling libraries and...
Mandrake Linux Security Advisory : ImageMagick (MDKSA-2004:143)
A vulnerability was discovered in ImageMagick where, due to a boundary error within the EXIF parsing routine, a specially crafted graphic image could potentially lead to the execution of arbitrary code. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable...
Debian DSA-593-1 : imagemagick - buffer overflow
A vulnerability has been reported for ImageMagick, a commonly used image manipulation library. Due to a boundary error within the EXIF parsing routine, a specially crafted graphic image could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[SECURITY] [DSA 593-1] New imagemagick packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 593-1 [email protected] http://www.debian.org/security/ Martin Schulze November 16th, 2004 http://www.debian.org/security/faq -...
DSA-593-1 imagemagick - buffer overflow
Bulletin has no description...
ImageMagic buffer overflow
Buffer overflow on EXIF format parsing...
USN-7-1: imagemagick vulnerability
A buffer overflow in imagemagick's EXIF parsing routine has been discovered in imagemagick versions prior to 6.1.0. Trying to query EXIF information of a malicious image file might result in execution of arbitrary code with the user's privileges. Since imagemagick can be used in custom printing...
GLSA-200409-12 : ImageMagick, imlib, imlib2: BMP decoding buffer overflows
The remote host is affected by the vulnerability described in GLSA-200409-12 ImageMagick, imlib, imlib2: BMP decoding buffer overflows Due to improper bounds checking, ImageMagick and imlib are vulnerable to a buffer overflow when decoding runlength-encoded bitmaps. This bug can be exploited usin...
ImageMagick -- BMP decoder buffer overflow
Marcus Meissner discovered that ImageMagick's BMP decoder would crash when loading the test BMP file created by Chris Evans for testing the previous Qt vulnerability...
CVE-2003-0555
ImageMagick 5.4.3.x and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a "%x" filename, possibly triggering a format string vulnerability...
ImageMagick's Overflow
ImageMagick's Overflow Rosiello Security's Advisory & DTORS http://www.rosiello.org I. BACKGROUND The ImageMagick display is an image viewer. ImageMagick is part of the KDE desktop and is bundled with all major Linux distributions. II. DESCRIPTION A vulnerability was found in this application tha...