EUVD-2017-9383

Malware in sbrugna...

ImageMagick MogrifyImageList Heap Buffer Overflow DoS

The vulnerability of the MogrifyImageList function in the MagickWand/mogrify.c component of the console-based ImageMagick graphics editor is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a speciall...

ImageMagick: assertion failure in MogrifyImageList function in MagickWand/mogrify.c

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service assertion failure and application exit in ReplaceImageInList via a crafted file...

ImageMagick: memory leaks at AcquireMagickMemory because of a wand/mogrify.c error

A flaw was found in ImageMagick, containing memory leaks of AcquireMagickMemory due to a wand/mogrify.c error. It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the function MogrifyImageList. An attacker could abuse this flaw by...

ImageMagick: memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c

A flaw was found in ImageMagick version 7.0.8-50 Q16, containing memory leaks of AcquireMagickMemory due to an error found in MagickWand/mogrify.c. It was discovered that ImageMagick does not properly release acquired memory when some error conditions occur in the function MogrifyImageList...

ImageMagick: memory leaks at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages

A flaw was found in ImageMagick version 7.0.8-50 Q16, containing memory leaks of AcquireMagickMemory due to the mishandling of the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c. It was discovered that ImageMagick does not properly release acquired memory in function...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a file to the application that when passed to the MogrifyImageList function, causes an assertion failure that crashes the application...

Code injection

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service assertion failure and application exit in ReplaceImageInList via a crafted file...

CVE-2017-18252

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service assertion failure and application exit in ReplaceImageInList via a crafted file...

CVE-2017-18252

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service assertion failure and application exit in ReplaceImageInList via a crafted file...

CVE-2017-18252: Reachable Assertion

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service assertion failure and application exit in ReplaceImageInList via a crafted file...

CVE-2017-18252

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service assertion failure and application exit in ReplaceImageInList via a crafted file...

UBUNTU-CVE-2017-18252

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service assertion failure and application exit in ReplaceImageInList via a crafted file...

PT-2017-4114

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7 Description The issue is related to the MogrifyImageList function in the MagickWand/mogrify.c component of ImageMagick, which can be exploited by attackers to cause a denial of service. This can be achieved through a...