17 matches found
openSUSE Security Update : GraphicsMagick (openSUSE-2017-1362)
This update for GraphicsMagick fixes the following issues : - CVE-2017-12140: ReadDCMImage in coders\dcm.c has a ninteger signedness error leading to excessive memory consumption bnc1051847 - CVE-2017-14994: NULL pointer in ReadDCMImage in coders/dcm.c could lead to denial of service bnc1061587 -...
CVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
CVE-2017-11360
CVE-2017-11360 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-11352
ImageMagick vulnerable component: the RLE coder (coders/rle.c) in builds prior to 7.0.5-10. A crafted RLE image can trigger a crash due to incorrect EOF handling, stemming from an incomplete fix for CVE-2017-9144. The description notes the issue exists before 7.0.5-10 and implies a remediation in...
CVE-2017-11352
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...
ImageMagick coders/rle.c Denial of Service Vulnerability - Windows
ImageMagick is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-9144
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...
CVE-2016-7519
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
Design/Logic Flaw
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2016-10049
CVE-2016-10049 is a buffer overflow in ImageMagick’s ReadRLEImage (coders/rle.c) prior to 6.9.4-4. A crafted RLE file can cause a denial of service (application crash) or other unspecified impact via remote input. The connected Red Hat advisory for RHEL7 lists this CVE among unpatched vulnerabili...
CVE-2014-9844
CVE-2014-9844 affects ImageMagick 6.8.9.9, where the ReadRLEImage function in coders/rle.c is vulnerable. A crafted image file can trigger an out-of-bounds read, enabling a remote denial of service. The vulnerability is tied to processing of RLE-encoded data within ImageMagick. The provided conne...
ImageMagick 'coders/rle.c' Remote Buffer Overflow Vulnerability - Mac OS X
ImageMagick is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"...
ImageMagick 'coders/rle.c' Remote Buffer Overflow Vulnerability - Windows
ImageMagick is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"...
ImageMagick 'coders/rle.c' file remote buffer overflow vulnerability
ImageMagick is a free software for creating, editing, and compositing images.The use of most of ImageMagick's features comes from the command line tools. A buffer overflow vulnerability exists in ImageMagick. An attacker could exploit this vulnerability to execute arbitrary code in an affected...