Mail.ru: Unupdated ImageMagic leads to uninitialized server memory disclosure

It was possible to disclosure the part of server memory from uncontrolled location on account.my.com project via uploaded GIF image header manipulation. account.my.com is not currently in the Bug Bounty scope, reward was paid as a bonus due to potential severity. CVE-2017-15277...

imagemagic DoS

Out-of-buffer reads...

Imagemagic security vulnerabilities

Memory corruptions on JPEG and PSD parsing...

imagemagic buffer overflow

Buffer overflow on GIF parsing...

ImageMagic memory corruption

Memory corruption on PNG processing...

Imagemagic multiple security vulnerabilities

Buffer overflows, insufficient user supplied data validation...

imagemagic security vulnerabilities

Memory corruption and DoS conditions on EXIF data parsing...

Debian Security Advisory DSA 547-1 (imagemagic)

The remote host is missing an update to imagemagic announced via advisory DSA 547-1. OpenVAS Vulnerability Test $Id: deb5471.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 547-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

ImageMagic multiple security vulnerabilities

Multiple vulnerabilities on BMP, DCM and another graphics formats parsing...

ImageMagic buffer overflow

Buffer overflow on DCM and XWD images processing...

ImageMagic graphic utilities shell characters problem

Shell characters problem with image filenames...

ImageMagic PNM buffer overflow

Heap overflow in ReadPNMImage...

ImageMagic PSD files buffer overflow

Integer array overflow in psd.c...

ImageMagic format string bug

Format string bug in filename...