ImageMagick < 7.0.8-25 Multiple Vulnerabilities

The version of ImageMagick installed on the remote Windows host is 7.x prior to 7.0.8-25. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in coders/pcd.c due to a memory leak in DecodeImage. An unauthenticated, remote attacker can exploit thi...

Memory Leak

ImageMagick is vulnerable to memory leak. The vulnerability is possible because it does not properly check the size of dibinfo.bitsperpixel in the WriteDIBImage function in coders/dib.c, allowing the attacker to trigger the attack...

CVE-2019-7398

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c...

Memory corruption

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c...

CVE-2019-7398

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c...

CVE-2019-7398

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c...

CVE-2019-7398

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c...

CVE-2019-7398

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c...

Updated graphicsmagick packages fix security vulnerabilities

It was discovered that graphicsmagick was subject to vulnerabilities. heap-based buffer overflow in the WriteTGAImage function of tga.c CVE-2018-20184. denial of service vulnerability in ReadDIBImage function of coders/dib.c CVE-2018-20189. heap-based buffer over-read in the ReadBMPImage function...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc1119790...

Information disclosure

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

CVE-2018-20189

GraphicsMagick 1.3.31 is affected by CVE-2018-20189 in the ReadDIBImage function (coders/dib.c). A crafted DIB image that exploits direct pixel values with colormapping (not supported beyond 8-bits/sample) can trigger missing indexes initialization, causing a crash and denial of service. No furth...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2018-1290)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted...

CVE-2018-16645

There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image file...

Denial Of Service (DoS) Through Out-of-Bounds Write

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a file to the ReadDIBImage function in dib.c to cause an out-of-bounds write that can overwrite information on the buffer or crash the application...

Out-of-bounds

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...

CVE-2018-12600

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...

CVE-2018-12600

ImageMagick 7.0.8-3 Q16 contains ReadDIBImage/WriteDIBImage in coders/dib.c that allow an out-of-bounds write via a crafted image file, leading to memory corruption/DoS. Affected releases and advisories reference CVE-2018-12600. Remediation: update ImageMagick to a patched version as advised by A...

CVE-2018-12600

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...

CVE-2018-12600

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...