CVE-2021-27224

The CVE-2021-27224 entry concerns IrfanView 4.57 with the WPG plugin (WPG.dll) prior to version 3.1.0.0. A user-mode write access violation in WPG (starting at WPG+0x...12ec6) could allow remote attackers to execute arbitrary code. Public sources consistently describe an out-of-bounds/write condi...

CVE-2021-27224

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

CVE-2021-27362

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

CVE-2021-27362

The CVE-2021-27362 entry concerns the IrfanView WPG plugin (older than 3.1.0.0) used with IrfanView 4.57, where a Read Access Violation on control flow (WPG!ReadWPG_W+0x…133) could allow remote attackers to execute arbitrary code. This vulnerability is described across multiple sources as an out-...

IrfanView 缓冲区错误漏洞

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. An out-of-bounds write vulnerability in IrfanView WPG plugin allows remote attackers to submit special requests that could crash the application or execute arbitrary code in the application...

IrfanView Buffer Error Vulnerability

IrfanView is an image viewer by the individual developer Irfan Skiljan from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in WPG plugin before 3.1.0.0 for IrfanView 4.57, which can be exploited by remote...

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the ReadWPGImage function (coders/wpg.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadWPGImage function coders/wpg.c in the cross-platform library for working with graphics, GraphicsMagick, is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created WPG file...

Denial Of Service (DoS)

ImageMagick is susceptible to denial of service DoS. The attack is possible due to the lack of proper validation of input WPG image in the ReadWPGImage function in coders/wpg.c, allowing an attacker to trigger ImportIndexQuantumType invalid write or crash the application...

The vulnerability of the cross-platform library for working with GraphicsMagick allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the cross-platform library for working with GraphicsMagick is related to buffer overflows during reading WPG formats. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or execute arbitrary code using a color map with a large number of...

graphicsmagick/coder_WPG_fuzzer: Use-of-uninitialized-value in BlendCompositePixel

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5736103441596416 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWPGfuzzer Fuzz target binary: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_WPG_fuzzer: Use-of-uninitialized-value in ReadWPGImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6589339552186368 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWPGfuzzer Fuzz target binary: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_WPG_fuzzer: Unknown signal in InsertRow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4875204321869824 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWPGfuzzer Fuzz target binary: coderWPGfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

graphicsmagick/coder_WPG_fuzzer: Use-of-uninitialized-value in ReadDIBImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5104083481395200 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWPGfuzzer Fuzz target binary: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a wpg file to the application to cause CPU exhaustion...

ImageMagick ExtractPostscript function macrocycle vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A macrocycle vulnerability exists in the ExtractPostscript function in coders/wpg.c in ImageMagick 7.0.7-12 Q16. An attacker can exploit this vulnerability to cause a...

CVE-2017-17682

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted wpg image file that triggers a ReadWPGImage call...

Design/Logic Flaw

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted wpg image file that triggers a ReadWPGImage call...

DEBIAN-CVE-2017-17682

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted wpg image file that triggers a ReadWPGImage call...

CVE-2017-17682

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted wpg image file that triggers a ReadWPGImage call...