RHEL 7 : advancecomp (RHSA-2019:2332)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2332 advisory. AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP files. Security Fixes: advancecomp: null pointer dereference in...

Low: Red Hat Security Advisory: advancecomp security update

An update for advancecomp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Fedora Update for advancecomp FEDORA-2019-b30b48200c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: advancecomp-2.1-11.fc30

AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP fil es. The main features are : Recompress ZIP, PNG and MNG files using the Deflate 7-Zip implementation. Recompress MNG files using Delta and Move optimization. This package contains: advzip - Recompression and test utility...

CVE-2018-9018

In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file...

Fedora Update for advancecomp FEDORA-2019-74a285d0ad

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: advancecomp-2.1-10.fc30

AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP fil es. The main features are : Recompress ZIP, PNG and MNG files using the Deflate 7-Zip implementation. Recompress MNG files using Delta and Move optimization. This package contains: advzip - Recompression and test utility...

openSUSE Security Update : GraphicsMagick (openSUSE-2019-397)

GraphicsMagick was updated to 1.3.29 : - Security Fixes : - GraphicsMagick is now participating in Google's oss-fuzz project - JNG: Require that the embedded JPEG image have the same dimensions as the JNG image as provided by JHDR. Avoids a heap write overflow. - MNG: Arbitrarily limit the number...

[SECURITY] Fedora 29 Update: advancecomp-2.1-9.fc29

AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP fil es. The main features are : Recompress ZIP, PNG and MNG files using the Deflate 7-Zip implementation. Recompress MNG files using Delta and Move optimization. This package contains: advzip - Recompression and test utility...

graphicsmagick/coder_MNG_fuzzer: Heap-buffer-overflow in mng_get_long

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5170869563817984 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMNGfuzzer Fuzz target binary: coderMNGfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_MNG_fuzzer: Heap-buffer-overflow in ReadMNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5938942376411136 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderMNGfuzzer Fuzz target binary: coderMNGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type:...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-518)

GraphicsMagick was updated to 1.3.29 : - Security Fixes : - GraphicsMagick is now participating in Google's oss-fuzz project - JNG: Require that the embedded JPEG image have the same dimensions as the JNG image as provided by JHDR. Avoids a heap write overflow. - MNG: Arbitrarily limit the number...

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

ImageMagick Memory Misreference Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in ReadOneMNGImage in coders/png.c in ImageMagick 7.0.7-16 Q16 x8664 2017-12-25. An attacker can exploit this vulnerability ...

DEBIAN-CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

Double free

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

CVE-2017-18272

CVE-2017-18272 affects ImageMagick 7.0.7-16 Q16 x86_64 (2017-12-25). The issue is a use-after-free in ReadOneMNGImage within coders/png.c, which allows denial of service via a crafted MNG image file mishandled in an MngInfoDiscardObject call. The connected sources consistently describe this exact...

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...