imagemagick imagemagick 6.0.2.5 vulnerabilities and exploits

(subscribe to this query)

ImageMagick prior to 6.3.5-9 allows context-dependent malicious users to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage functio...

Multiple integer overflows in ImageMagick prior to 6.3.5-9 allow context-dependent malicious users to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.

Off-by-one error in the ReadBlobString function in blob.c in ImageMagick prior to 6.3.5-9 allows context-dependent malicious users to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick prior to 6.2.9 allows user-assisted malicious users to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap...

1 EDB exploit

The XWD Decoder in ImageMagick prior to 6.2.2.3, and GraphicsMagick prior to 1.1.6-r1, allows remote malicious users to cause a denial of service (infinite loop) via an image with a zero color mask.

Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote malicious users to execute arbitrary code via a .PSD image file with a large number of layers.

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick prior to 6.0.2.5 may allow remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to conver...

Imagemagick Imagemagick 5.5 Imagemagick Imagemagick 5.2 Imagemagick Imagemagick 5.3 Imagemagick Imagemagick 5.4

Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and previous versions allows remote malicious users to cause a denial of service (application crash) via a PNM file with a small colors value.

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook