PT-2016-6218

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.5-3 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF file. This is related to the coders/tiff.c file in ImageMagick. Recommendations For versions...

CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

CVE-2015-8808

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

CVE-2015-8808: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service uninitialized memory access via a crafted GIF file...

PT-2017-6402

Name of the Vulnerable Software and Affected Versions ImageMagick version 6.8.9.9 Description The issue is related to a memory leak in the ReadPSDLayers function in coders/psd.c. This allows remote attackers to cause a denial of service due to memory consumption via unspecified vectors...

PT-2017-7718

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.1-10 Description The issue concerns the ReadGROUP4Image function in coders/tiff.c, which does not properly check the return value of the fputc function. This allows remote attackers to cause a denial of servic...

PT-2016-7381

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-10 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by converting an image to rgf format. This is related to the coders/rgf.c file in ImageMagick...

PT-2016-4033

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.18 Description The issue allows remote attackers to cause a denial of service due to uninitialized memory access. This is achieved through a crafted GIF file that exploits the DecodeImage function in coders/gif.c...

ImageMagick: Integer and buffer overflow in coders/icon.c

Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service application crash via a crafted length value, which triggers a buffer overflow...

PT-2017-1548

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-1 Description The issue is caused by a buffer overflow in the coders/tiff.c component of the ImageMagick console graphic editor. This can be exploited by a remote attacker using a specially crafted TIFF file...

PT-2017-7720

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-5 Description The issue is related to a buffer overflow in the ReadVIFFImage function, located in coders/viff.c. This can be exploited by remote attackers using a crafted file, leading to a denial of service...

PT-2017-1731

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-0 Description The issue is caused by an out-of-bounds read in the coders/mat.c file, allowing remote attackers to cause a denial of service via a crafted mat file. This can result in the application crashing...

PT-2017-1558

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-4 Description The issue is caused by a buffer overflow in the ReadRLEImage function in coders/rle.c. This allows remote attackers to cause a denial of service, such as an application crash, or have other...

PT-2017-1732

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-5 Description The issue is caused by insufficient input validation in the coders/mat.c file of ImageMagick, allowing remote attackers to cause a denial of service application crash via a mat file with an...

Debian DLA-486-1 : imagemagick security update (ImageTragick)

Nikolay Ermishkin from the Mail.Ru Security Team and Stewie discovered several vulnerabilities in ImageMagick, a program suite for image manipulation. These vulnerabilities, collectively known as ImageTragick, are the consequence of lack of sanitization of untrusted input. An attacker with contro...

DLA-486-1 imagemagick - security update

Bulletin has no description...

Debian DSA-3580-1 : imagemagick - security update (ImageTragick)

Nikolay Ermishkin from the Mail.Ru Security Team and Stewie discovered several vulnerabilities in ImageMagick, a program suite for image manipulation. These vulnerabilities, collectively known as ImageTragick, are the consequence of lack of sanitization of untrusted input. An attacker with contro...

Debian Security Advisory DSA 3580-1 (imagemagick - security update)

Nikolay Ermishkin from the Mail.Ru Security Team and Stewie discovered several vulnerabilities in ImageMagick, a program suite for image manipulation. These vulnerabilities, collectively known as ImageTragick, are the consequence of lack of sanitization of untrusted input. An attacker with contro...

Debian: Security Advisory (DSA-3580-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SOL25102203 - ImageMagick vulnerability CVE-2016-3716

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...