3973 matches found
CVE-2017-13140
In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service application hang in LockSemaphoreInfo via a PNG file with a width equal to MAGICKWIDTHLIMIT...
CVE-2017-13142
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files...
CVE-2017-13142
CVE-2017-13142 affects ImageMagick prior to 6.9.9-0 and 7.x prior to 7.0.6-1. A crafted PNG file could trigger a crash due to an insufficient check for short files. The vulnerability’s impact is a crash (partial influence on availability) as described in the CVE entry. Remediation: upgrade to Ima...
CVE-2017-13141
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c...
ImageMagick Denial of Service Vulnerability (CNVD-2017-236922)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WriteOneJNGImage' function in the coders/png.c file in ImageMagick...
CVE-2017-13142
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files...
DEBIAN-CVE-2017-13059
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service WriteJNGImage memory consumption via a crafted file...
CVE-2017-13059
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service WriteJNGImage memory consumption via a crafted file...
Threat Analysis: Carbon Black Threat Research Dissects PNG Dropper
UPDATE 8/14/17: After posting the original analysis, the Carbon Black Threat Research team received numerous requests for the tools to extract the second stage payload from the initial PNGdropper file. As a result, the source code and compiled binaries are being made public and are posted to the...
CVE-2017-12640
ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c...
Denial Of Service (DoS) Via Memory Leaks
ImageMagick is vulnerable to denial of service DoS attacks. The attacks can be caused by passing a malicious PNG file to ReadOneMNGImage function in coders/png.c...
Out-Of-Bounds Read
ImageMagick is vulnerable to out-of-bounds read. A malicious user can pass a PNG file to the application to cause an out-of-bounds read, crashing the application...
MGASA-2017-0245 Updated swftools package fixes security vulnerability
In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution CVE-2017-8400...
Updated swftools package fixes security vulnerability
In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution CVE-2017-8400...
DEBIAN-CVE-2017-12671
In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service...
CVE-2017-12671
In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service...
DEBIAN-CVE-2017-12676
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service...
DEBIAN-CVE-2017-12641
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c...