Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. When attackers input malicious image files, it causes a NULL pointer dereference issue in the ReadCUTImage function in coders/cut.c...

PT-2017-13273

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-2 Description The issue is related to a memory leak in the WriteMSLImage function located in coders/msl.c. Recommendations For ImageMagick version 7.0.6-2, consider updating to a newer version that addresses the memor...

PT-2017-2815

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-5 Description The issue is related to a memory leak in the ReadWEBPImage function in coders/webp.c. This occurs because memory is not freed in certain error cases, such as VP8 errors. The vulnerability can be exploite...

CVE-2017-14139: Missing Release of Resource after Effective Lifetime

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...

CVE-2017-14138: Missing Release of Resource after Effective Lifetime

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

CVE-2017-14137: Uncontrolled Resource Consumption

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

PT-2017-2965

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-0 Q16 Description The issue is related to a NULL Pointer Dereference in the PostscriptDelegateMessage function, located in coders/ps.c. This could potentially allow a remote attacker to impact the confidentiality,...

PT-2017-2999

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-0 Q16 Description The issue is related to a NULL pointer dereference in the ReadOneMNGImage function, located in coders/png.c. This vulnerability can be exploited by a remote attacker to impact the confidentiality,...

PT-2017-2963

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-0 Q16 Description The issue is related to a NULL Pointer Dereference in the sixel decode function located in coders/sixel.c. This could potentially allow a remote attacker to impact the confidentiality, integrity, and...

PT-2017-2964

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-0 Q16 Description The issue is related to a NULL Pointer Dereference vulnerability in the sixel output create function, located in coders/sixel.c. This vulnerability can be exploited by a remote attacker to impact th...

PT-2017-3000

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-0 Q16 Description The issue is related to a NULL pointer dereference in the ReadEnhMetaFile function, located in coders/emf.c. This could potentially allow a remote attacker to impact the confidentiality, integrity, a...

PT-2017-2966

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-0 Description The issue is related to a NULL pointer dereference error in the TIFFIgnoreTags component of the ImageMagick console graphic editor, located in coders/tiff.c. This error can be exploited by a remote...

PT-2017-3001

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-0 Q16 Description The issue is related to a NULL pointer dereference in the PDFDelegateMessage component of the ImageMagick console graphic editor, located in coders/pdf.c. This could potentially allow a remote attack...

CVE-2017-12691

The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-12691

CVE-2017-12691 is rejected and does not represent an active vulnerability entry.

CVE-2017-12693

CVE-2017-12693 – ImageMagick’s ReadBMPImage (coders/bmp.c) in version 7.0.6-6 and earlier allows remote attackers to cause a denial of service via a crafted BMP file by triggering memory consumption. The connected Nessus entry corroborates the issue and indicates affected 7.0.6-6 timeframe. No re...

CVE-2017-14103

The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call...

CVE-2017-14103

The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call...

CVE-2017-12691: Allocation of Resources Without Limits or Throttling

The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-14103: Use After Free

The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call...