imagemagick imagemagick 7.0.5-8 vulnerabilities and exploits

(subscribe to this query)

In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows malicious users to cause a denial of service via a crafted file.

Imagemagick Imagemagick 7.0.5-8

The ReadTXTImage function in coders/txt.c in ImageMagick up to and including 6.9.9-0 and 7.x up to and including 7.0.6-1 allows remote malicious users to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.

The WriteOnePNGImage function in coders/png.c in ImageMagick up to and including 6.9.9-0 and 7.x up to and including 7.0.6-1 allows remote malicious users to cause a denial of service (NULL pointer dereference) via a crafted file.

The ReadCINImage function in coders/cin.c in ImageMagick prior to 6.9.9-0 and 7.x prior to 7.0.6-1 allows remote malicious users to cause a denial of service (memory consumption) via a crafted file.

In ImageMagick prior to 6.9.9-1 and 7.x prior to 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote malicious users to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT.

In ImageMagick prior to 6.9.9-0 and 7.x prior to 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.

In ImageMagick prior to 6.9.9-3 and 7.x prior to 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.

The WriteBlob function in MagickCore/blob.c in ImageMagick prior to 6.9.8-10 and 7.x prior to 7.6.0-0 allows remote malicious users to cause a denial of service (assertion failure and application exit) via a crafted file.

The ReadOneMNGImage function in coders/png.c in ImageMagick prior to 6.9.9-0 and 7.x prior to 7.0.6-1 allows remote malicious users to cause a denial of service (large loop and CPU consumption) via a crafted file.

The ReadDPXImage function in coders/dpx.c in ImageMagick prior to 6.9.9-0 and 7.x prior to 7.0.6-1 allows remote malicious users to cause a denial of service (memory consumption) via a crafted file.

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook