2506 matches found
CVE-2017-13132
In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service assertion failure in WriteBlobStream in MagickCore/blob.c via a crafted file...
CVE-2017-13133
In ImageMagick 7.0.6-8, the loadlevel function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service loadtile memory exhaustion via a crafted file...
PT-2017-12995
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description A memory leak issue was discovered in the function ReadMATImage in coders/mat.c. Recommendations For GraphicsMagick version 1.3.26, consider updating to a newer version to mitigate the risk, however at...
CVE-2017-13141: Missing Release of Resource after Effective Lifetime
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c...
PT-2017-12934
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description An allocation failure issue was discovered in the ReadMNGImage function, located in coders/png.c, when processing a small MNG file containing a MEND chunk with a large length value. Recommendations For...
PT-2017-12922
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-8 Description The issue is related to the WritePDFImage function in the coders/pdf.c file, which incorrectly operates on a data structure. This can be exploited by attackers using a crafted file, leading to a denial o...
CVE-2017-13139: Out-of-bounds Read
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk...
CVE-2017-13134: Out-of-bounds Read
In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-13648: Missing Release of Resource after Effective Lifetime
In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c...
CVE-2017-13147: Improper Input Validation
In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value...
CVE-2017-13140: Improper Restriction of Operations within the Bounds of a Memory Buffer
In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service application hang in LockSemaphoreInfo via a PNG file with a width equal to MAGICKWIDTHLIMIT...
CVE-2017-13133: Allocation of Resources Without Limits or Throttling
In ImageMagick 7.0.6-8, the loadlevel function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service loadtile memory exhaustion via a crafted file...
CVE-2017-13131: Missing Release of Resource after Effective Lifetime
In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service memory consumption in NewLinkedList in MagickCore/linked-list.c via a crafted file...
CVE-2017-13143
In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...
CVE-2017-13146: Missing Release of Resource after Effective Lifetime
In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c...
ImageMagick Denial of Service Vulnerability (CNVD-2017-236955)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'formatIPTC' function of the coders/meta.c file in ImageMagick version...
PT-2017-4127
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6 Description The issue is related to the TIFFSetProfiles function in the coders/tiff.c component of ImageMagick, which has incorrect expectations about data validation. This allows remote attackers to cause a denial of...
CVE-2017-13132: Reachable Assertion
In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service assertion failure in WriteBlobStream in MagickCore/blob.c via a crafted file...
