rpm package
suse/ImageMagick&distro=SUSE Linux Enterprise Desktop 12 SP2
pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2
Vulnerabilities (230)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-12428 | Hig | 7.5 | < 6.8.8.1-71.12.1 | 6.8.8.1-71.12.1 | Aug 4, 2017 | In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c. | |
| CVE-2017-12427 | Med | 6.5 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Aug 4, 2017 | The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted file, related to the WriteMSLImage function. | |
| CVE-2017-12418 | Hig | 7.5 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Aug 4, 2017 | ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c. | |
| CVE-2017-12140 | Med | 6.5 | < 6.8.8.1-71.17.1 | 6.8.8.1-71.17.1 | Aug 2, 2017 | The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file. | |
| CVE-2017-11752 | Med | 6.5 | < 6.8.8.1-71.17.1 | 6.8.8.1-71.17.1 | Jul 30, 2017 | The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-11751 | Med | 6.5 | < 6.8.8.1-71.23.1 | 6.8.8.1-71.23.1 | Jul 30, 2017 | The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file. | |
| CVE-2017-11750 | Med | 6.5 | < 6.8.8.1-71.33.1 | 6.8.8.1-71.33.1 | Jul 30, 2017 | The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |
| CVE-2017-11724 | Med | 6.5 | < 6.8.8.1-71.26.1 | 6.8.8.1-71.26.1 | Jul 29, 2017 | The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures. | |
| CVE-2017-11644 | Med | 6.5 | < 6.8.8.1-71.26.1 | 6.8.8.1-71.26.1 | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c. | |
| CVE-2017-11642 | Hig | 8.8 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Jul 26, 2017 | GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638. | |
| CVE-2017-11640 | Med | 6.5 | < 6.8.8.1-71.17.1 | 6.8.8.1-71.17.1 | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c. | |
| CVE-2017-11639 | Med | 6.5 | < 6.8.8.1-71.33.1 | 6.8.8.1-71.33.1 | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h. | |
| CVE-2017-11638 | Hig | 8.8 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Jul 26, 2017 | GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642. | |
| CVE-2017-11539 | Med | 6.5 | < 6.8.8.1-71.33.1 | 6.8.8.1-71.33.1 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c. | |
| CVE-2017-11537 | Med | 6.5 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation. | |
| CVE-2017-11535 | Med | 6.5 | < 6.8.8.1-71.17.1 | 6.8.8.1-71.17.1 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c. | |
| CVE-2017-11534 | Med | 6.5 | < 6.8.8.1-71.12.1 | 6.8.8.1-71.12.1 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c. | |
| CVE-2017-11533 | Med | 6.5 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c. | |
| CVE-2017-11531 | Med | 6.5 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Jul 23, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c. | |
| CVE-2017-11530 | Med | 6.5 | < 6.8.8.1-71.42.1 | 6.8.8.1-71.42.1 | Jul 23, 2017 | The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. |
- affected < 6.8.8.1-71.12.1fixed 6.8.8.1-71.12.1
In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted file, related to the WriteMSLImage function.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c.
- affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1
The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.
- affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1
The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-71.23.1fixed 6.8.8.1-71.23.1
The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1
The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
- affected < 6.8.8.1-71.26.1fixed 6.8.8.1-71.26.1
The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures.
- affected < 6.8.8.1-71.26.1fixed 6.8.8.1-71.26.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638.
- affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c.
- affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642.
- affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.
- affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c.
- affected < 6.8.8.1-71.12.1fixed 6.8.8.1-71.12.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c.
- affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1
The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
Page 7 of 12