CVE-2017-12875
The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published Updated
PatchFirst · Latest vulnerabilities
imagemagick vulnerabilities · Page 27
Vulnerabilities published for imagemagick in the last 30 days: 82. Listed in the KEV catalogue: 0.
Vulnerabilities: 864
CVE-2017-12877
Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-13658
In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.
- Update to 8:6.9.7.4+dfsg-14
Published UpdatedCVE-2017-13146
In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.
- Update to 8:6.9.7.4+dfsg-14
Published UpdatedCVE-2017-13145
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.
- Update to 8:6.9.7.4+dfsg-13
Published UpdatedCVE-2017-13144
In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder.
- Update to 8:6.9.7.4+dfsg-13
Published UpdatedCVE-2017-13143
In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.
- Update to 8:6.9.7.4+dfsg-14
Published UpdatedCVE-2017-13142
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.
- Update to 8:6.9.7.4+dfsg-15
Published UpdatedCVE-2017-13141
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c.
- Update to 8:6.9.7.4+dfsg-15
Published UpdatedCVE-2017-13140
In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT.
- Update to 8:6.9.7.4+dfsg-15
Published UpdatedCVE-2017-13139
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
- Update to 8:6.9.7.4+dfsg-15
Published UpdatedCVE-2017-13134
In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-13133
In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-13131
In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (memory consumption in NewLinkedList in MagickCore/linked-list.c) via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-13062
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-13061
In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-13060
In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-13059
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-13058
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published UpdatedCVE-2017-12983
Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
- Update to 8:6.9.9.34+dfsg-3
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.