96 matches found
PT-2017-3857
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to the ReadRLEImage function in coders/rle.c, which mishandles RLE headers that specify too few colors. This can be exploited by remote attackers to cause a denial of service,...
CVE-2017-14733: Out-of-bounds Read
ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
ImageMagick 'ReadRLEImage' Function Denial of Service Vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'ReadRLEImage' function of the coders\rle.c file in ImageMagick version 7.0.6-1...
CVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
Denial Of Service (DoS) Through Large Loop
ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible through the ReadRLEImage function in coders\rle.c which contains a large loop. If a rle file is passed to the application with a large numberpixels value, it can cause a denial of service condition through CPU...
DEBIAN-CVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
CVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
CVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
CVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
CVE-2017-11360
CVE-2017-11360 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
PT-2017-11958
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Description The issue concerns a large loop vulnerability in the ReadRLEImage function, located in codersrle.c. This vulnerability can be triggered by a crafted rle file, which causes a huge number pixels value...
CVE-2017-11360: Excessive Iteration
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:1489-1)
This update for ImageMagick fixes the following issues: Security issues fixed : - CVE-2017-6502: Possible file-descriptor leak in libmagickcore that could be triggered via a specially crafted webp file bsc1028075. - CVE-2017-7943: The ReadSVGImage function in svg.c allowed remote attackers to...
ImageMagick Information Disclosure Vulnerability (CNVD-2017-07513)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. An information disclosure vulnerability exists in versions of ImageMagick prior to 7.0.5-2, which stems from the failu...
Sensitive Information Leak
ImageMagick is vulnerable to a sensitive information leak. The vulnerability exists because it fails to perform an initialization step in the ReadRLEImage function in coders/rle.c. Therefore, the uninitialized memory in the RLE decoder can be used to access sensitive information from process memo...
CVE-2017-9098
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...
PT-2017-18701
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.5-2 GraphicsMagick versions prior to 1.3.24 Description The issue allows an attacker to leak sensitive information from process memory space due to the use of uninitialized memory in the RLE decoder. This can ...
CVE-2017-9098: Use of Uninitialized Resource
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...
