imagemagick imagemagick 6.1.1.6 vulnerabilities and exploits

(subscribe to this query)

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick prior to 6.2.9 allows user-assisted malicious users to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap...

1 EDB exploit

ImageMagick prior to 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.

The XWD Decoder in ImageMagick prior to 6.2.2.3, and GraphicsMagick prior to 1.1.6-r1, allows remote malicious users to cause a denial of service (infinite loop) via an image with a zero color mask.

Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote malicious users to execute arbitrary code via a .PSD image file with a large number of layers.

Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and previous versions allows remote malicious users to cause a denial of service (application crash) via a PNM file with a small colors value.

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook