PT-2017-13404

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-6 Description The issue is related to a memory leak in the ReadXCFImage function, located in coders/xcf.c, which can be triggered by a crafted xcf image file. Recommendations For ImageMagick version 7.0.6-6, consider...

CVE-2017-14325

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service memory consumption in ReadMPCImage in coders/mpc.c via a crafted file...

CVE-2017-14342: Uncontrolled Resource Consumption

ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file...

CVE-2017-14343: Missing Release of Resource after Effective Lifetime

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

CVE-2017-14341: Uncontrolled Resource Consumption

ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file...

CVE-2017-14249

ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file...

CVE-2017-14249

ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file...

PT-2017-3874

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.3.26 through 7.0.6 Description The issue is caused by a buffer overflow in the coders/wpg.c component of the GraphicsMagick library, allowing a remote attacker to cause a denial of service or possibly execute arbitrar...

Heap overflow

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file...

CVE-2017-14224

CVE-2017-14224 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-14224

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file...

CVE-2017-14173

In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...

Denial Of Service (DoS) Through Infinite Loop

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a txt file to the application through the ReadTXTImage function in coders/txt.c to cause an infinite loop...

ImageMagick 'ReadTXTImage()' Function Integer Overflow Vulnerability

ImageMagick is a set of open source image processing software. The software can read, convert and write images in a variety of formats. An integer overflow vulnerability exists in the 'ReadTXTImage' function in the coders/txt.c file in ImageMagick version 7.0.6-10. An attacker can exploit this...

Integer overflow

In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...

CVE-2017-14173

In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...

CVE-2017-14172

CVE-2017-14172 is rejected and not an active vulnerability entry.

CVE-2017-14173

In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...

CVE-2017-14173

In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...

CVE-2017-14173

CVE-2017-14173 affects ImageMagick (ImageMagick 7.0.6-10) and specifically the TXT image codec. The vulnerability arises in ReadTXTImage() (coders/txt.c) where an integer overflow can occur on the addition GetQuantumRange(depth)+1 when depth is large, causing an infinite loop when processing a cr...