PT-2017-3844

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the ReadSUNImage function, located in coders/sun.c. This can potentially allow a remote attacker to execute arbitrary code. The problem is...

CVE-2017-11755

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file that is mishandled in an AcquireSemaphoreInfo call...

CVE-2017-11752

CVE-2017-11752 affects ImageMagick (notably ImageMagick 7.0.6-4) via the ReadMAGICKImage function in coders/magick.c. It allows remote attackers to cause a denial of service by leaking memory when processing a crafted file. The connected Nessus entry confirms an unpatched vulnerability in this ex...

CVE-2017-11750

The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-11751

CVE-2017-11751 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-11755: Missing Release of Resource after Effective Lifetime

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file that is mishandled in an AcquireSemaphoreInfo call...

CVE-2017-11752: Missing Release of Resource after Effective Lifetime

The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-11751: Missing Release of Resource after Effective Lifetime

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file...

PT-2017-2577

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-4 Description The issue is related to the WritePICONImage function in coders/xpm.c, which can cause a denial of service due to a memory leak. This occurs when a crafted file is mishandled in an OpenPixelCache call,...

PT-2017-2581

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.9-4 through 7.0.6-4 Description The issue is related to the ReadOneJNGImage function in coders/png.c, which can cause a denial of service due to a NULL pointer dereference when processing a crafted file. This can be...

PT-2017-2576

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-4 Description The issue is related to the WritePICONImage function in coders/xpm.c, which is caused by a buffer overflow in memory. This can be exploited by a remote attacker using a specially crafted file, leading t...

CVE-2017-11724

The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantuminfo and cloneinfo data structures...

UBUNTU-CVE-2017-11724

The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantuminfo and cloneinfo data structures...

CVE-2017-11724

CVE-2017-11724 is described in connected material as a memory-leak weakness in ImageMagick’s ReadMATImage (coders/mat.c). The vulnerability affects ImageMagick up to 6.9.9-3 and 7.x up to 7.0.6-3, specifically involving the quantum_info and clone_info data structures. The Nessus entry for this CV...

CVE-2017-11724

The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantuminfo and cloneinfo data structures...

CVE-2017-11722

The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging...

CVE-2017-11722: Out-of-bounds Read

The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging...

Heap-Based Buffer Over-read

ImageMagick is vulnerable to heap-based buffer over-read. The vulnerability is possible because WriteCIPImage function in coders/cip.c does not prevent processing of malicious file in covert...

PT-2017-3843

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a use-after-free problem in the ReadWMFImage function, located in coders/wmf.c, which can be exploited by a remote attacker to execute arbitrary code. This is a result of the...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-19975)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'WriteMAPImage' function in the coders/map.c file in GraphicsMagick version 1.3.26. An attacker can exploit...