imagemagick imagemagick 7.0.2-0 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick prior to 6.9.5-4 and 7.x prior to 7.0.2-6 allows remote malicious users to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.

Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick prior to 6.9.7-3 and 7.x prior to 7.0.4-3 allows remote malicious users to cause a denial of service (application crash) via a crafted TIFF file.

In ImageMagick prior to 6.9.7-6 and 7.x prior to 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote malicious users to obtain sensitive information from process memory.

Memory leak in coders/mpc.c in ImageMagick prior to 6.9.7-4 and 7.x prior to 7.0.4-4 allows remote malicious users to cause a denial of service (memory consumption) via vectors involving a pixel cache.

Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote malicious users to cause a denial of service (application crash) via a crafted tga file.

The WriteOnePNGImage function in coders/png.c in ImageMagick up to and including 6.9.9-0 and 7.x up to and including 7.0.6-1 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted file.

The ReadTXTImage function in coders/txt.c in ImageMagick up to and including 6.9.9-0 and 7.x up to and including 7.0.6-1 allows remote malicious users to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.

The ReadCINImage function in coders/cin.c in ImageMagick prior to 6.9.9-0 and 7.x prior to 7.0.6-1 allows remote malicious users to cause a denial of service (memory consumption) via a crafted file.

In ImageMagick prior to 6.9.9-1 and 7.x prior to 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote malicious users to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT.

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook