Astra Linux – Vulnerability in GraphicsMagick

GraphicsMagick version 1.3.35 has a heap-based buffer overflow in the ReadMNGImage function in the coders/png.c file...

EUVD-2017-3030

Malware in sbrugna...

EUVD-2017-18197

Malware in sbrugna...

EUVD-2017-9058

Malware in sbrugna...

EUVD-2020-4968

Malware in sbrugna...

EUVD-2018-20623

Malware in sbrugna...

EUVD-2017-17305

Malware in sbrugna...

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2025-1159)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1159 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png....

Linux Distros Unpatched Vulnerability : CVE-2019-11007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause...

Denial Of Service (DoS)

libGraphicsMagick.so is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to a divide-by-zero error in the ReadMNGImage function of png.c which allows an attacker to cause an application crash via a crafted mng file...

graphicsmagick:coder_MNG_fuzzer: Heap-buffer-overflow in ReadMNGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5742271231557632 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMNGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : GraphicsMagick vulnerabilities (USN-5974-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5974-1 advisory. It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image files, which could lead...

SUSE CVE-2017-8345

In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service memory leak via a crafted file...

SUSE CVE-2017-9261

In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service memory leak via a crafted file...

SUSE CVE-2017-11403

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file...

SUSE CVE-2017-13147

In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value...

SUSE CVE-2017-17915

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...

SUSE CVE-2018-9018

In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file...

SUSE CVE-2019-11007

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause a denial of service or information disclosure via an image colormap...

imagemagick:encoder_mng_fuzzer: Heap-use-after-free in ReadMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5135071096471552 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-use-after-free READ 1 Cra...