428 matches found
DEBIAN-CVE-2017-17504
ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...
EximiousSoft Banner Maker v5.45 Handles PNG with Memory Corruption Vulnerability
EximiousSoft Banner Maker is an image manipulation tool. EximiousSoft Banner Maker suffers from a memory corruption vulnerability when processing the PNG format. An attacker can cause the program to crash or lead to arbitrary code execution by constructing malformed PNG images...
UBUNTU-CVE-2017-15017
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...
ImageMagick ReadOneJNGImage Buffer Overflow DoS
The vulnerability of the ReadOneJNGImage function coders/png.c in the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause memory exhaustion and service failure...
Unspecified Vulnerability in GraphicsMagick
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadMNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. No details of the vulnerability are...
ImageMagick Denial of Service Vulnerability (CNVD-2017-25057)
ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial of service vulnerability exists in the ReadOnePNGImage function of the ImageMagick coders/png.c file, which allows remote attackers to exploit the vulnerability to construct a...
ImageMagick Denial of Service Vulnerability (CNVD-2017-25056)
ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in ImageMagick's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into...
DEBIAN-CVE-2017-13141
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c...
DEBIAN-CVE-2017-13142
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files...
UBUNTU-CVE-2017-13142
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files...
ImageMagick Denial of Service Vulnerability (CNVD-2017-21001)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadOneMNGImage' function in the coders/png.c file in ImageMagick...
DEBIAN-CVE-2017-12640
ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c...
UBUNTU-CVE-2017-12565
In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service...
DEBIAN-CVE-2017-12565
In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service...
GraphicsMagick 'WriteOnePNGImage' Function Denial of Service Vulnerability
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'WriteOnePNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. A remote attacker can...
DEBIAN-CVE-2017-11139
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
Flash Player Code Execution
The vulnerability of the PNG image analyzer in the Flash Player software is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
CVE-2017-8400
In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...
pngdefry 'pngdefry.c' heap buffer overflow vulnerability
pngdefry is a suite of applications for iPhone and iPad to modify PNG images. A heap buffer overflow vulnerability exists in pngdefry 2017-03-22 and earlier versions. Due to the program failing to properly handle specially crafted png files. An attacker could exploit the vulnerability to cause a...
ImageMagick DoS
The vulnerability of the SpliceImage function in the console-based image editing tool ImageMagick is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure application termination by using a specially created PNG file...