Summary
It was discovered that ImageMagick incorrectly handled certain malformed
image files. If a user or automated system using ImageMagick were tricked
into opening a specially crafted image, an attacker could exploit this to
cause a denial of service or possibly execute code with the privileges of
the user invoking the program.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.5 |
| Ubuntu · 16.04 LTS 16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.5 |
Vulnerabilities 10
-
High 7.5
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. …
-
Unscored —
The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, wh…
-
Unscored —
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.
-
Unscored —
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related …
-
Unscored —
Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of…
-
Unscored —
Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a c…
-
Unscored —
Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a den…
-
Unscored —
Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows…
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers a…
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which tr…
References
-
report
https://ubuntu.com/security/CVE-2016-8707
-
report
https://ubuntu.com/security/CVE-2016-10062
-
report
https://ubuntu.com/security/CVE-2016-10144
-
report
https://ubuntu.com/security/CVE-2016-10145
-
report
https://ubuntu.com/security/CVE-2016-10146
-
report
https://ubuntu.com/security/CVE-2017-5506
-
report
https://ubuntu.com/security/CVE-2017-5507
-
report
https://ubuntu.com/security/CVE-2017-5508
-
report
https://ubuntu.com/security/CVE-2017-5510
-
report
https://ubuntu.com/security/CVE-2017-5511