CVE-2017-11447

CVE-2017-11447 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-11449

coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an image received from stdin...

CVE-2017-11449

CVE-2017-11449 affects ImageMagick. The vulnerability lies in coders/mpc.c in versions before 7.0.6-1, where seekable streams are not enabled and blob sizes cannot be validated. This may allow remote attackers to cause a denial of service (application crash) or potentially other impact via an ima...

CVE-2017-11448: Exposure of Sensitive Information to an Unauthorized Actor

The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...

CVE-2017-11449: Undefined Security Weakness

coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an image received from stdin...

CVE-2017-11403: Use After Free

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file...

DEBIAN-CVE-2017-11352

In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...

CVE-2017-11360

CVE-2017-11360 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-11352

In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...

CVE-2017-11352

ImageMagick vulnerable component: the RLE coder (coders/rle.c) in builds prior to 7.0.5-10. A crafted RLE image can trigger a crash due to incorrect EOF handling, stemming from an incomplete fix for CVE-2017-9144. The description notes the issue exists before 7.0.5-10 and implies a remediation in...

CVE-2017-11360: Excessive Iteration

The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...

CVE-2017-11352: Undefined Security Weakness

In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...

CVE-2017-11352

In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...

PT-2017-11952

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.5-10 Description A crafted RLE image can cause a crash due to incorrect EOF handling in the coders/rle.c file. This issue is a result of an incomplete fix for a previous problem. Recommendations For versions...

CVE-2017-11310

CVE-2017-11310 entry rejected/not used; does not represent an active vulnerability.

CVE-2017-11188

No additional technical details about CVE-2017-11188 are provided in the connected documents. The supplied sources do not specify affected products, versions, or fixes beyond the initial description; monitor for updates.

CVE-2017-11188: Excessive Iteration

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...

CVE-2017-11170: Missing Release of Resource after Effective Lifetime

The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file...

CVE-2017-11166

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...

CVE-2017-11166

CVE-2017-11166 is an ImageMagick memory-leak vulnerability: the ReadXWDImage function in coders/xwd.c can exhaust memory when processing a crafted XWD header’s color-map length. Reported for ImageMagick 7.0.5-6, the issue is a memory leak in ReadXWDImage that leads to memory exhaustion, with CVSS...