EUVD-2017-8934

Malware in sbrugna...

SUSE CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

Ubuntu 16.04 ESM : ImageMagick vulnerabilities (USN-5335-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5335-1 advisory. It was discovered that ImageMagick incorrectly handled certain values when processing XPM image data or large images. If a user or automated system using...

CVE-2020-25665

CVE-2020-25665 affects ImageMagick’s PALM image coder (coders/palm.c). The vulnerability arises from an improper call to AcquireQuantumMemory() in WritePALMImage() that should offset by 256; this can lead to an out-of-bounds read later in the routine. The fix patches the call by adding 256 to byt...

UBUNTU-CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

GraphicsMagick buffer overflow vulnerability (CNVD-2017-38120)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A heap buffer overflow vulnerability exists in the 'ReadPALMImage' function of the coders/palm.c file in GraphicsMagick version 1.3.27a. An attacker can...

CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

CVE-2017-12664

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c...

Memory Leak

ImageMagick is vulnerable to denial of service DoS attacks through a memory leak. A malicious user can cause a memory leak by passing a palm file to WritePALMImage in coders/palm.c...

CVE-2017-12664

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c...

CVE-2017-12664

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c...

CVE-2017-12664

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c...

CVE-2017-11537

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception FPE in the WritePALMImage function in coders/palm.c, related to an incorrect bits-per-pixel calculation...

ImageMagick Denial of Service Vulnerability (CNVD-2017-08550)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadPALMImage' function of the palm.c file in ImageMagick version...

CVE-2017-9407

In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-9407

ImageMagick 7.0.5-5 is affected by CVE-2017-9407 via the ReadPALMImage function in palm.c, which allows a crafted Palm file to trigger a memory leak and potential denial of service. This exact vulnerability detail is supported by connected Nessus/Unpatched entries for CVE-2017-9407 (ReadPALMImage...

CVE-2017-9407

In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-9407

In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service memory leak via a crafted file...