CVE-2019-12978

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c...

CVE-2019-12977

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c...

CVE-2019-12977

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c...

CVE-2019-12977

CVE-2019-12977 entry is rejected/not used; not an active vulnerability.

CVE-2019-12976

ImageMagick 7.0.8-34 is affected by CVE-2019-12976 due to a memory leak in ReadPCLImage (coders/pcl.c). The description specifies a memory leak in ReadPCLImage, implying potential memory exhaustion under some inputs. The connected documents do not provide a patch version or remediation steps, and...

CVE-2019-12976

ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c...

CVE-2019-12976

ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c...

CVE-2019-12975

ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c...

CVE-2019-12975

ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c...

CVE-2019-12975

CVE-2019-12975 : ImageMagick 7.0.8-34 has a memory-leak vulnerability in WriteDPXImage (coders/dpx.c). The issue is a leak, with no described exploit vectors in the supplied documents. Connected sources also reference ImageMagick-related advisories and lists of CVEs; the MiracleLinux/Nessus entri...

CVE-2019-12974

A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image...

CVE-2019-12974

ImageMagick 7.0.8-34 contains a NULL pointer dereference in ReadPANGOImage (coders/pango.c) and ReadVIDImage (coders/vid.c) that can be triggered by a crafted image, leading to denial of service. The entry documents this vulnerability and its affected components; no remediation details are provid...

CVE-2019-12974

A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image...

PT-2019-5178 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-34 Description: The issue is related to the use of an uninitialized value in the SyncImageSettings function in MagickCore/image.c, which is also connected to AcquireImage in magick/image.c. This could potentially all...

PT-2019-13064 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-34 Description: The issue is related to a memory leak in the ReadPCLImage function, located in coders/pcl.c. Recommendations: For ImageMagick version 7.0.8-34, consider updating to a newer version that addresses the...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1712-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. Fixed a file content disclosure via SVG and WMF decoding bsc1138425.- CVE-2019-11472: Fixed a denial of service in ReadXWDImage...

Ubuntu 16.04 LTS / 18.04 LTS : ImageMagick vulnerabilities (USN-4034-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4034-1 advisory. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were...

Ubuntu: Security Advisory (USN-4034-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SEMrush Plugs Remote Code Execution Bug in Its SaaS Platform

UPDATE Search engine optimization and analytics firm SEMrush patched a remote code execution vulnerability that allowed an attacker to send a malicious image to its service and generate a reverse shell, a typical first stage in a cyberattack. Public disclosure of the vulnerability was Monday when...

SUSE-SU-2019:1712-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage bsc1138464. - Fixed a file content disclosure via SVG and WMF decoding bsc1138425.- CVE-2019-11472: Fixed a denial of service in ReadXWDImage...