Summary
It was discovered that ImageMagick incorrectly handled certain malformed
image files. If a user or automated system using ImageMagick were tricked
into opening a specially crafted image, an attacker could exploit this to
cause a denial of service or possibly execute code with the privileges of
the user invoking the program.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.2 |
Vulnerabilities 103
-
Unscored —
The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of se…
-
Unscored —
PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
-
Unscored —
DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
-
Unscored —
The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory ac…
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a craft…
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.
-
Unscored —
The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a craft…
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a craft…
-
Unscored —
The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and applic…
-
Unscored —
The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and applic…
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.
-
Unscored —
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.
-
Unscored —
ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.
-
Unscored —
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a…
-
Unscored —
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.
-
Unscored —
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.
-
Unscored —
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.
-
Unscored —
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a…
-
Unscored —
ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file.
-
Unscored —
coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted s…
-
Unscored —
coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted sun file.
-
Unscored —
coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file.
-
Unscored —
Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
-
Unscored —
Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
-
Unscored —
Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
-
Unscored —
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
-
Unscored —
coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a…
-
Unscored —
magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
-
Unscored —
magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds ac…
-
Unscored —
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.
-
Unscored —
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact vi…
-
Unscored —
The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact …
-
Unscored —
The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (…
-
Unscored —
The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) v…
-
Unscored —
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have uns…
-
Unscored —
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
-
Unscored —
Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
-
Unscored —
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
-
Unscored —
Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
-
Unscored —
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
-
Unscored —
Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) vi…
-
Unscored —
coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors relat…
-
Unscored —
coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file.
-
Unscored —
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of s…
-
Unscored —
Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service…
-
Unscored —
Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of se…
-
Unscored —
The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a den…
-
Unscored —
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial…
-
Unscored —
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of servi…
-
Unscored —
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted …
-
Unscored —
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a den…
-
Unscored —
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a…
-
Unscored —
Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application cr…
-
Unscored —
coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds rea…
-
Unscored —
coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) …
-
Unscored —
The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calcu…
-
Unscored —
The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles th…
-
Unscored —
The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect fun…
-
Unscored —
coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) v…
-
Unscored —
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attacke…
-
Unscored —
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attacker…
-
Unscored —
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact …
-
Unscored —
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to…
-
Unscored —
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact …
-
Unscored —CVE-2016-5841 EPSS 13%
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of ser…
-
Unscored —
MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via …
-
Unscored —
Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7…
-
Unscored —
Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (…
-
Unscored —
The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) …
-
Unscored —
Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fa…
-
Unscored —
The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (…
-
Unscored —
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b…
-
Unscored —
The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of…
-
Unscored —
The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b…
-
Unscored —
The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b…
-
Unscored —
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b…
-
Unscored —
Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-…
-
Unscored —
Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-…
-
Unscored —
The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (o…
-
Unscored —
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted fi…
-
Unscored —
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted fi…
-
Unscored —
Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-…
-
Unscored —
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted fi…
-
Unscored —
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted fil…
-
Unscored —
The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmen…
-
Unscored —
coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF…
-
Unscored —
The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or …
-
Unscored —
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a cra…
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD…
-
Unscored —
The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b…
-
Unscored —
The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a cr…
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PS…
-
Unscored —
magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted…
-
Unscored —
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a cr…
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted fi…
-
Unscored —
Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memor…
-
Unscored —
coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by…
References
-
report
https://ubuntu.com/security/CVE-2014-8354
-
report
https://ubuntu.com/security/CVE-2014-8355
-
report
https://ubuntu.com/security/CVE-2014-8562
-
report
https://ubuntu.com/security/CVE-2014-8716
-
report
https://ubuntu.com/security/CVE-2014-9805
-
report
https://ubuntu.com/security/CVE-2014-9806
-
report
https://ubuntu.com/security/CVE-2014-9807
-
report
https://ubuntu.com/security/CVE-2014-9808
-
report
https://ubuntu.com/security/CVE-2014-9809
-
report
https://ubuntu.com/security/CVE-2014-9810
-
report
https://ubuntu.com/security/CVE-2014-9811
-
report
https://ubuntu.com/security/CVE-2014-9812
-
report
https://ubuntu.com/security/CVE-2014-9813
-
report
https://ubuntu.com/security/CVE-2014-9814
-
report
https://ubuntu.com/security/CVE-2014-9815
-
report
https://ubuntu.com/security/CVE-2014-9816
-
report
https://ubuntu.com/security/CVE-2014-9817
-
report
https://ubuntu.com/security/CVE-2014-9818
-
report
https://ubuntu.com/security/CVE-2014-9819
-
report
https://ubuntu.com/security/CVE-2014-9820
-
report
https://ubuntu.com/security/CVE-2014-9821
-
report
https://ubuntu.com/security/CVE-2014-9822
-
report
https://ubuntu.com/security/CVE-2014-9823
-
report
https://ubuntu.com/security/CVE-2014-9826
-
report
https://ubuntu.com/security/CVE-2014-9828
-
report
https://ubuntu.com/security/CVE-2014-9829
-
report
https://ubuntu.com/security/CVE-2014-9830
-
report
https://ubuntu.com/security/CVE-2014-9831
-
report
https://ubuntu.com/security/CVE-2014-9833
-
report
https://ubuntu.com/security/CVE-2014-9834
-
report
https://ubuntu.com/security/CVE-2014-9835
-
report
https://ubuntu.com/security/CVE-2014-9836
-
report
https://ubuntu.com/security/CVE-2014-9837
-
report
https://ubuntu.com/security/CVE-2014-9838
-
report
https://ubuntu.com/security/CVE-2014-9839
-
report
https://ubuntu.com/security/CVE-2014-9840
-
report
https://ubuntu.com/security/CVE-2014-9841
-
report
https://ubuntu.com/security/CVE-2014-9843
-
report
https://ubuntu.com/security/CVE-2014-9844