37 matches found
CVE-2017-17912
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region...
CVE-2017-17912
CVE-2017-17912 affects GraphicsMagick (TIFF reader). The issue is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, where LocaleNCompare reads data beyond the allocated region, exposing potential denial of service or information disclosure as noted in multiple advisories. Connect...
openSUSE Security Update : GraphicsMagick (openSUSE-2017-1155)
This update for GraphicsMagick fixes the following security issues : - CVE-2017-14532: NULL pointer Dereference in TIFFIgnoreTags in coders/tiff.c allowing for DoS bsc1059663 - CVE-2017-15033: Memory leak in ReadYUVImage could have allowed DoS boo1061873 %NASLMINLEVEL 70300 C Tenable Network...
Out-of-bounds
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...
CVE-2017-14607
CVE-2017-14607 concerns ImageMagick 7.0.7-4 Q16 where an out-of-bounds read in ReadTIFFImage (coders/tiff.c) could allow an attacker to disclose memory contents or crash the application. The description specifies the root cause as an out-of-bounds read in TIFF decoding and notes potential memory ...
CVE-2017-14532
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c...
CVE-2017-14532
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c...
CVE-2017-14532
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c...
CVE-2017-14532
CVE-2017-14532 entries are rejected/not used and do not represent an active vulnerability.
CVE-2017-14532
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c...
CVE-2017-11640
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...
CVE-2017-11640
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...
CVE-2017-11640
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...
Buffer overflow
When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...
CVE-2016-10057
CVE-2016-10057 : ImageMagick is affected by a buffer overflow in the WriteGROUP4Image function (coders/tiff.c). A crafted TIFF file can trigger this overflow, allowing remote attackers to cause an application crash (DoS) and potentially other unspecified impacts. The cited vulnerability is in Ima...
CVE-2016-10053
CVE-2016-10053 affects ImageMagick (before 6.9.5-8). The WriteTIFFImage function in coders/tiff.c can be triggered by a crafted TIFF file to cause a denial of service via a divide-by-zero error, crashing the application. Root cause is division by zero in TIFF handling leading to an unhandled exce...