CVE-2017-11139

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

CVE-2017-11139

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

CVE-2017-11139

GraphicsMagick 1.3.26 contains a double-free vulnerability in ReadOneJNGImage() (coders/png.c), tracked as CVE-2017-11139. Connected advisories indicate multiple distributions published fixes; e.g., Debian/DSA-4321-1 and Fedora advisories include GraphicsMagick updates to 1.3.28+ to address this ...

PT-2017-11771

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to double free vulnerabilities in the ReadOneJNGImage function, located in the coders/png.c file. Recommendations For GraphicsMagick version 1.3.26, consider disabling the...

CVE-2017-11139: Double Free

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

GraphicsMagick 'ReadOneJNGImage()' function double release vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A double release vulnerability exists in the 'ReadOneJNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. An attacker can exploit th...

PT-2017-2610

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1 Description The issue is related to a memory exhaustion vulnerability in the ReadOneJNGImage function, located in coders/png.c, of the ImageMagick console graphic editor. This vulnerability can be exploited by a...

Design/Logic Flaw

The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service application crash during JNG reading via a zero-length colorimage data structure...

UBUNTU-CVE-2017-11102

The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service application crash during JNG reading via a zero-length colorimage data structure...

CVE-2017-11102

The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service application crash during JNG reading via a zero-length colorimage data structure...

CVE-2017-11102

The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service application crash during JNG reading via a zero-length colorimage data structure...

CVE-2017-11102

GraphicsMagick (the ReadOneJNGImage function in coders/png.c) is affected by CVE-2017-11102, a remote denial of service vulnerability triggered during JNG image parsing due to a zero-length color_image data structure. Public bulletins in multiple distros corroborate the issue across GraphicsMagic...

PT-2017-3836

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue exists due to insufficient input validation in the ReadOneJNGImage function, located in coders/png.c. This allows a remote attacker to cause a denial of service, resulting in an application...

CVE-2017-11102: Improper Input Validation

The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service application crash during JNG reading via a zero-length colorimage data structure...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:1489-1)

This update for ImageMagick fixes the following issues: Security issues fixed : - CVE-2017-6502: Possible file-descriptor leak in libmagickcore that could be triggered via a specially crafted webp file bsc1028075. - CVE-2017-7943: The ReadSVGImage function in svg.c allowed remote attackers to...

ImageMagick Denial of Service Vulnerability (CNVD-2017-07524)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial-of-service vulnerability vulnerability exists in the 'WriteBlob' function of the MagickCore/blob.c file in...

Denial Of Service (DoS) Through Assertion Failure

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible through missing checks in the ReadOneJNGImage function in coders/png.c. The missing checks cause an assertion failure to occur in the WriteBlob function of MagickCore/blob.c...

CVE-2017-9142

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c...

Design/Logic Flaw

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c...

CVE-2017-9142

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c...