2506 matches found
SUSE-SU-2018:2562-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issue fixed: - Disable PS, PS2, PS3, XPS and PDF coders in default policy.xml bsc1105592...
PT-2018-19224
Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description The issue concerns a security problem where certain coders are enabled by default, potentially leading to exploitation. The estimated number of potentially affected devices worldwide is n...
SUSE-SU-2018:2553-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issue fixed: - Hide PS, XPS and PDF coders into /vulnerable bsc1105592...
PT-2018-19221
Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description The issue concerns a security problem where PS, XPS, and PDF coders are hidden into a vulnerable directory. Recommendations At the moment, there is no information about a newer version th...
openSUSE Security Update : GraphicsMagick (openSUSE-2018-937)
This update for GraphicsMagick fixes the following issues : Security issue fixed : - Disable PS, PS2, PS3 and PDF coders by default, remove gs calls from delegates.mgk boo1105592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Security update for GraphicsMagick (important)
This update for GraphicsMagick fixes the following issues: Security issue fixed: - Disable PS, PS2, PS3 and PDF coders by default, remove gs calls from delegates.mgk boo1105592...
Ghostscript - Multiple Vulnerabilities
Exploit for linux platform in category local exploits http://seclists.org/oss-sec/2018/q3/142 These are critical and trivial remote code execution bugs in things like ImageMagick, Evince, GIMP, and most other PDF/PS tools. ---- Hello, this was discussed on the distros list, but it was suggested t...
Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities
Overview Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Ghostscript contains an optional -dSAFER option, which is supposed to prevent unsafe PostScript...
Security update for GraphicsMagick (low)
This update for GraphicsMagick fixes the following issues: The following security issue was fixed: - CVE-2018-14435: Fixed a memory leak in DecodeImage in coders/pcd.c boo1102007...
PT-2018-2695
Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-37 Description The issue is related to the InsertRow function in ImageMagick, which is vulnerable to an out-of-bounds write. This can be exploited by a remote attacker using a specially crafted image file, potentiall...
CVE-2018-14437
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c...
CVE-2018-14435
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...
CVE-2018-14434
ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c...
Memory corruption
The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption...
CVE-2018-14551
The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption...
CVE-2018-14551
CVE-2018-14551 affects ImageMagick due to ReadMATImageV4 in coders/mat.c, which uses an uninitialized variable and can cause memory corruption. Public records (EulerOS advisory) confirm the issue in ImageMagick and list ReadMATImageV4 as vulnerable. The vulnerability is tied to ImageMagick 7.x re...
CVE-2018-14551
The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption...
CVE-2018-14551: Out-of-bounds Write
The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption...