suse/ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 12 SP2

Vulnerabilities (230)

• CVE-2017-15016HigOct 5, 2017
  affected < 6.8.8.1-71.47.1fixed 6.8.8.1-71.47.1

  ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.

• CVE-2017-14989MedOct 3, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.

• CVE-2017-14739HigSep 26, 2017
  affected < 6.8.8.1-71.47.1fixed 6.8.8.1-71.47.1

  The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash

• CVE-2017-14733MedSep 25, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

• CVE-2017-14682HigSep 21, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928.

• CVE-2017-14649MedSep 21, 2017
  affected < 6.8.8.1-71.33.1fixed 6.8.8.1-71.33.1

  ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c, and application crash).

• CVE-2017-14607HigSep 20, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

• CVE-2017-14533MedSep 18, 2017
  affected < 6.8.8.1-71.26.1fixed 6.8.8.1-71.26.1

  ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.

• CVE-2017-14531MedSep 18, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.

• CVE-2017-14505MedSep 17, 2017
  affected < 6.8.8.1-71.47.1fixed 6.8.8.1-71.47.1

  DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Imag

• CVE-2017-14343MedSep 12, 2017
  affected < 6.8.8.1-71.20.1fixed 6.8.8.1-71.20.1

  ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file.

• CVE-2017-14342MedSep 12, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.

• CVE-2017-14341MedSep 12, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file.

• CVE-2017-14326MedSep 12, 2017
  affected < 6.8.8.1-71.26.1fixed 6.8.8.1-71.26.1

  In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.

• CVE-2017-14314MedSep 12, 2017
  affected < 6.8.8.1-71.47.1fixed 6.8.8.1-71.47.1

  Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer over-read and application crash) via a crafted file.

• CVE-2017-14249MedSep 11, 2017
  affected < 6.8.8.1-71.23.1fixed 6.8.8.1-71.23.1

  ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.

• CVE-2017-14224HigSep 9, 2017
  affected < 6.8.8.1-71.42.1fixed 6.8.8.1-71.42.1

  A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

• CVE-2017-14175MedSep 7, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and columns fields in the header but does not contain sufficient backing data, is provi

• CVE-2017-14174MedSep 7, 2017
  affected < 6.8.8.1-71.20.1fixed 6.8.8.1-71.20.1

  In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is pro

• CVE-2017-14173MedSep 7, 2017
  affected < 6.8.8.1-71.17.1fixed 6.8.8.1-71.17.1

  In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TX