DEBIAN-CVE-2008-6072

Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service crash via unspecified vectors in 1 XCF and 2 CINEON images...

CVE-2008-6072

Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service crash via unspecified vectors in 1 XCF and 2 CINEON images...

Code injection

Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service crash via unspecified vectors in 1 XCF and 2 CINEON images...

CVE-2008-6072

Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service crash via unspecified vectors in 1 XCF and 2 CINEON images...

CVE-2008-6072

Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service crash via unspecified vectors in 1 XCF and 2 CINEON images...

CVE-2008-6072

CVE-2008-6072 affects GraphicsMagick; multiple vulnerabilities allow remote DoS (crash) via XCF and CINEON images. Public details show affected versions: before 1.1.14 and before 1.2.3 (in 1.2.x line). Debian/OSV/OpenVAS entries confirm the DoS vectors and list fixed versions by distro (e.g., Gra...

CVE-2008-6072: Undefined Security Weakness

Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service crash via unspecified vectors in 1 XCF and 2 CINEON images...

USN-681-1: ImageMagick vulnerability

It was discovered that ImageMagick did not correctly handle certain malformed XCF images. If a user were tricked into opening a specially crafted image with an application that uses ImageMagick, an attacker could cause a denial of service and possibly execute arbitrary code with the user's...

Gentoo Security Advisory GLSA 200607-08 (gimp)

The remote host is missing updates announced in advisory GLSA 200607-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200607-08 (gimp)

The remote host is missing updates announced in advisory GLSA 200607-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : ImageMagick (ImageMagick-5277)

ImageMagick is affected by two security problems : CVE-2008-1096: Buffer overflow in the handling of XCF files CVE-2008-1097: Heap buffer overflow in the handling of PCX files %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

GraphicsMagick多个堆溢出及拒绝服务漏洞

BUGTRAQ ID: 29583 GraphicsMagick是一个简单的图像处理工具。 GraphicsMagick的coders/palm.c文件的ReadPALMImage函数在处理特制的PALM图形时存在堆溢出漏洞，coders/pict.c文件的DecodeImage函数在处理特制的PICT图形时也存在堆溢出漏洞。如果用户受骗打开了恶意的图形文件的话，就可能导致在系统上执行任意指令。 此外GraphicsMagick在处理特制的XCF、DPX和CINEON图形时还可能导致崩溃。 GraphicsMagick Group GraphicsMagick 1.2.3...

ImageMagick XCF及PCX文件处理堆溢出漏洞

BUGTRAQ ID: 28822,28821 CVECAN ID: CVE-2008-1097,CVE-2008-1096 ImageMagick是一款Unix/Linux平台下开源的图像查看和编辑工具。 ImageMagick解析XCF文件的方式存在堆溢出漏洞，如果打开了特制的XCF图形的话，ImageMagick就可能覆盖所分配内存区域之外的堆内存，这可能允许攻击者在运行ImageMagick的机器上执行任意指令。 ImageMagick处理某些畸形PCX图形的方式存在堆溢出漏洞，如果受害用户打开了特制的PCX文件的话，攻击者就可以在受害用户机器上执行任意指令。 ImageMagi...

RHEL 3 / 4 / 5 : ImageMagick (RHSA-2008:0145)

Updated ImageMagick packages that correct several security issues are now available for Red Hat Enterprise Linux versions 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2008:0145 Updated ImageMagick packages that correct several security issues are now available for Red Hat Enterprise Linux versions 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagic...

Infinite loops in ImageMagick's XCF and DCM coders

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers 1 an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or 2 an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong...

Infinite loops in ImageMagick's XCF and DCM coders

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers 1 an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or 2 an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong...

Out of bound write in ImageMagick's XCF coder

The loadtile function in the XCF coder in coders/xcf.c in 1 ImageMagick 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly...

CVE-2008-1096

The loadtile function in the XCF coder in coders/xcf.c in 1 ImageMagick 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly...

CVE-2008-1096

The loadtile function in the XCF coder in coders/xcf.c in 1 ImageMagick 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly...