PT-2016-7372 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue in ImageMagick's quantum handling code allows remote attackers to cause a denial of service. This can be achieved through a crafted file, resulting in either a divide-by-zero...

PT-2016-7374 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted PSD file. This is related to the coders/psd.c file in ImageMagick. Recommendations: At th...

PT-2016-7376 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service due to out-of-bounds access via a crafted file. Recommendations: At the moment, there is no information about a newer...

PT-2016-7377 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service out-of-bounds write via a crafted PSD file. This is due to a problem in the coders/psd.c file of ImageMagick...

PT-2016-7378 · Imagemagick +1 · Imagemagick +1

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by utilizing a crafted profile. This is related to the magick/profile.c component in...

PT-2016-7379 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service due to out-of-bounds access via a crafted PDB file. This is related to the memory.c file in MagickCore. Recommendations: A...

UBUNTU-CVE-2016-6491

Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service out-of-bounds read, memory leak, and crash via a crafted image...

Updated imagemagick packages fix security vulnerabilities

Updated imagemagick package fixes security vulnerabilities: The OpenBlob function in blob.c in ImageMagick allows remote attackers to execute arbitrary code via a | pipe character at the start of a filename CVE-2016-5118. Integer overflow in MagickCore/profile.c CVE-2016-5841. Buffer overread in...

PT-2017-6399 · Imagemagick +1 · Imagemagick +1

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: A heap-based buffer overflow issue in ImageMagick allows remote attackers to have an unspecified impact via a crafted psd file. Recommendations: At the moment, there is no information...

PT-2017-6403 · Imagemagick +1 · Imagemagick +1

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue in ImageMagick allows remote attackers to have an unspecified impact via unspecified vectors due to the re-use of objects after they have been destroyed in distribute-cache.c...

PT-2017-1559

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.4-7 Description The issue is related to a directory traversal vulnerability in the magick/module.c component of ImageMagick, which can be exploited by remote attackers to load arbitrary modules via unspecified vectors...

PT-2017-8703

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions prior to 1.3.24 Description The issue allows remote attackers to cause a denial of service, resulting in an arithmetic exception and application crash, through a crafted svg file. This is due to a problem in the...

UBUNTU-CVE-2016-5690

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table...

ImageMagick DCM Parser Null Pointer Access Vulnerability

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A security vulnerability exists in ImageMagick's DCM parser, which can be exploited by attackers to cause null pointer access and segmentation errors...

ImageMagick 7.x < 7.0.1-10 Multiple Vulnerabilities

The remote Windows host has a version of ImageMagick installed that is 7.x prior to 7.0.1-10. It is, therefore, affected by the following vulnerabilities : - An overflow condition exists in the ReadRLEImage function in rle.c due to improper validation of user-supplied input. An unauthenticated,...

ImageMagick: Crash due to out of bounds error in SpliceImage

The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...

ImageMagick: SVG converting issue resulting in DoS

The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service infinite loop by converting a circularly defined SVG file...

ImageMagick,GraphicsMagick: Gnuplot delegate vulnerability allowing command injection

It was discovered that ImageMagick did not properly sanitize certain input before passing it to the gnuplot delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick...

ImageMagick Denial of Service Vulnerability (CNVD-2016-03864)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in ImageMagick. An attacker can exploit this vulnerability to cause a denial ...

PT-2017-1734

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-5 Description The issue is related to a buffer overflow in the magick/memory.c file of ImageMagick, which can be triggered by "too many exceptions" vectors, leading to a denial of service application crash...