Security update for ImageMagick (important)

This update for ImageMagick fixes the following issues: The update disables various insecure coders boo978061 These fix issues tracked in CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717, CVE-2016-3718...

PT-2017-3864

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 GraphicsMagick version 1.3.26 Description The issue arises from the ReadGIFImage function in coders/gif.c, which fails to initialize the palette when processing a GIF file without a global or local palette. This can...

CVE-2016-3718

The 1 HTTP and 2 FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery SSRF attacks via a crafted image...

PT-2016-1813 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.3-10 ImageMagick versions 7.x prior to 7.0.1-1 Description: The issue exists due to insufficient input validation in the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders of the ImageMagick console...

CVE-2016-3718: Server-Side Request Forgery (SSRF)

The 1 HTTP and 2 FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery SSRF attacks via a crafted image...

UBUNTU-CVE-2016-3718

The 1 HTTP and 2 FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery SSRF attacks via a crafted image...

CVE-2016-3715

It was discovered that certain ImageMagick coders and pseudo-protocols did not properly prevent security sensitive operations when processing specially crafted images. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an...

PT-2015-3277

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.5-0 Description The issue is caused by an integer truncation problem in the coders/pict.c file, allowing remote attackers to cause a denial of service by crashing the application via a crafted .pict file. This...

PT-2015-3278

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.1-3 and later Description The issue is caused by an integer overflow in the ImageMagick console graphic editor. This can be exploited by a remote attacker to cause a denial of service application crash by providing lar...

UBUNTU-CVE-2015-8894

Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service application crash via a crafted tga file...

PT-2015-3279

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.0 and later Description The issue is related to a double free vulnerability in the coders/tga.c file, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This can...

PT-2015-7826

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.x through 7.x Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by using a crafted HDR file. This is related to the ReadHDRImage function in coders/hdr.c...

kentuckycoders.com vulnerability

Vulnerable URL: http://www.kentuckycoders.com/?option=comkycoders=CodeHS%20-%20Link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 14.03.2016 Latest check for patch:| 14.03.2016 06:03 GMT Vulnerability status:| Publicly disclosed Alexa Rank| 13304436 Google...

Python for Security Professionals: Free IT Security Training

Python is an excellent programming language that has rapidly become popular among Hackers, Reverse engineers, software testers, Forensic analyst and Penetration testers. Python is a simple object-oriented and minimalistic language that is easy to learn for novice programmers as well as experience...

PT-2016-3105

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.0-4 Beta Description The issue is related to the coders/dds.c component in ImageMagick, which is associated with improper system resource management. This can be exploited by a remote attacker to cause a denia...

PT-2016-3106

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.0-4 Beta Description The issue is caused by an out-of-bounds read in the coders/sun.c component of ImageMagick, allowing remote attackers to cause a denial of service application crash via a crafted SUN file...

PT-2015-7828

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.x before 6.9.0-5 Beta Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by utilizing a crafted PDB file. This is due to a problem in the ReadBlobByte function in...

PT-2015-7829

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.0-5 Beta Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a crafted VICAR file to the ReadVICARImage function in coders/vicar.c...

PT-2014-9055

Name of the Vulnerable Software and Affected Versions ImageMagick version 6.8.9.9 Description The issue concerns the DecodePSDPixels function in coders/psd.c, which allows remote attackers to have an unspecified impact via unknown vectors. This could potentially lead to exploitation, although...

PT-2014-9054

Name of the Vulnerable Software and Affected Versions ImageMagick version 6.8.9.9 Description The issue is related to the ReadPSDLayers function in coders/psd.c, which allows remote attackers to have an unspecified impact through unknown vectors. This is related to the "throwing of exceptions."...