3252 matches found
CVE-2017-17915: Out-of-bounds Read
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
CVE-2017-17913: Out-of-bounds Read
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
CVE-2017-17915
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
CVE-2017-17913
CVE-2017-17913 affects GraphicsMagick, specifically a stack-based buffer over-read in WriteWEBPImage (coders/webp.c) caused by incompatibility with libwebp versions 0.5.0 and later. The description in the initial document notes GraphicsMagick 1.4 snapshot-20171217 Q8 as affected. Connected docume...
CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
CVE-2017-17915
CVE-2017-17915 affects GraphicsMagick (notably the GraphicsMagick 1.4 snapshot-20171217 Q8) where a heap-based buffer over-read occurs in ReadMNGImage (coders/png.c) due to accessing one byte before testing a limit. This aligns with multiple advisories noting GraphicsMagick vulnerabilities and CV...
CVE-2017-17912
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region...
CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
CVE-2017-17915
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
CVE-2017-17912
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region...
CVE-2017-17912
CVE-2017-17912 affects GraphicsMagick (TIFF reader). The issue is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, where LocaleNCompare reads data beyond the allocated region, exposing potential denial of service or information disclosure as noted in multiple advisories. Connect...
PT-2017-15096
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.4 snapshot-20171217 Q8 Description The issue is related to a heap-based buffer over-read in the ReadNewsProfile function, located in coders/tiff.c. This occurs because LocaleNCompare reads data from the heap beyond the...
GraphicsMagick buffer overflow vulnerability (CNVD-2017-38120)
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A heap buffer overflow vulnerability exists in the 'ReadPALMImage' function of the coders/palm.c file in GraphicsMagick version 1.3.27a. An attacker can...
GraphicsMagick Buffer Overflow Vulnerability (CNVD-2017-38119)
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'ReadOneJNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.27a. An attacker can exploit...
Security update for ImageMagick (important)
This update for ImageMagick fixes the following issues: CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 Memory le...
PT-2017-3879
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.4 snapshot-20171217 Q8 Description The issue is related to a stack-based buffer over-read in the WriteWEBPImage function in coders/webp.c, which is caused by an incompatibility with libwebp versions 0.5.0 and later tha...
PT-2017-3880
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.4 snapshot-20171217 Q8 Description The issue is related to a heap-based buffer over-read in the ReadMNGImage function, located in coders/png.c. This error can be exploited by a remote attacker to execute arbitrary code...
MGASA-2017-0455 Updated graphicsmagick packages fix security vulnerabilities
The updated packages fix many security vulnerabilities...
