Design/Logic Flaw

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service uncontrolled resource consumption by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a...

CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error by crafting an XWD image file in which the header indicates neither LSB first nor MSB first...

CVE-2019-11473: Out-of-bounds Read

coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service out-of-bounds read and application crash by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009...

PT-2019-5874 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-41 Q16 Description: The issue is related to a denial-of-service divide-by-zero error in the XWD image parsing component of ImageMagick. This can be triggered by crafting a specific XWD image file where the header doe...

GraphicsMagick buffer overread vulnerability (CNVD-2019-12506)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A heap buffer over-read vulnerability exists in the ReadMIFFImage function in coders/miff.c in GraphicsMagick 1.4 snapshot-20190322 Q8, which can be exploite...

Heap overflow

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause a denial of service or information disclosure via an image colormap...

CVE-2019-11010

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of service via a crafted image file...

CVE-2019-11010

GraphicsMagick 1.4 snapshot-20190322 Q8 is affected by CVE-2019-11010 due to a memory leak in ReadMPCImage (coders/mpc.c), enabling denial of service via a crafted image. Public records in multiple advisories confirm this issue alongside related CVEs (e.g., 11005–11009, 11473–11474) affecting SVG...

CVE-2019-11007

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause a denial of service or information disclosure via an image colormap...

CVE-2019-11007

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause a denial of service or information disclosure via an image colormap...

CVE-2019-11005: Out-of-bounds Write

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a quoted font family value...

PT-2019-5240

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.4 snapshot-20190322 Q8 Description The issue is related to a heap-based buffer over-read in the ReadMNGImage function of coders/png.c. This allows attackers to cause a denial of service or information disclosure via an...

PT-2019-5205

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.4 snapshot-20190322 Q8 and earlier Description The issue is related to a buffer overflow in the SVGStartElement function of the GraphicsMagick graphic editor, which can be exploited by a remote attacker to gain...

Coders Survey 3.4.10 Database Disclosure

Exploit Title : Coders Survey 3.4.10 Database Disclosure Exploit Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 02/04/2019 Vendor Homepage : coders-survey.com Software Download Link : github.com/fortrabbit/coders-survey/archive/master.zip Software Information...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-1114)

According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.CVE-2019-7398 Note that Tenable Network Security has...

CVE-2019-10650

CVE-2019-10650: ImageMagick 7.0.8-36 Q16 has a heap-based buffer over-read in WriteTIFFImage (coders/tiff.c) that can cause denial of service or information disclosure via crafted TIFF images. Likely linked to LibTIFF write paths (TIFFRewriteDirectory/TIFFWriteDirectory) and incomplete prior fix....

CVE-2019-10649

In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file...

CVE-2019-10649: Missing Release of Memory after Effective Lifetime

In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file...

openSUSE Security Update : ImageMagick (openSUSE-2019-658)

This update for ImageMagick fixes the following issues : Security issue fixed : - Disable PS, PS2, PS3, XPS and PDF coders in default policy.xml bsc1105592 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

openSUSE Security Update : GraphicsMagick (openSUSE-2019-641)

This update for GraphicsMagick fixes the following issues : Security issue fixed : - Disable PS, PS2, PS3 and PDF coders by default, remove gs calls from delegates.mgk boo1105592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...