Summary
It was discovered that ImageMagick incorrectly handled certain malformed
image files. If a user or automated system using ImageMagick were tricked
into opening a specially crafted image, an attacker could exploit this to
cause a denial of service or possibly execute code with the privileges of
the user invoking the program.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.7 |
| Ubuntu · 16.04 LTS 16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.7 |
Vulnerabilities 26
-
Unscored —
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined …
-
Unscored —
In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algo…
-
Unscored —
The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available mem…
-
Unscored —
The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available mem…
-
Unscored —
In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak…
-
Unscored —
In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can caus…
-
Unscored —
In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory l…
-
Unscored —
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an at…
-
Unscored —
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function…
-
Unscored —
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/b…
-
Unscored —
In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory…
-
Unscored —
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.
References
-
report
https://ubuntu.com/security/CVE-2017-7606
-
report
https://ubuntu.com/security/CVE-2017-7619
-
report
https://ubuntu.com/security/CVE-2017-7941
-
report
https://ubuntu.com/security/CVE-2017-7942
-
report
https://ubuntu.com/security/CVE-2017-7943
-
report
https://ubuntu.com/security/CVE-2017-8343
-
report
https://ubuntu.com/security/CVE-2017-8344
-
report
https://ubuntu.com/security/CVE-2017-8345
-
report
https://ubuntu.com/security/CVE-2017-8346
-
report
https://ubuntu.com/security/CVE-2017-8347
-
report
https://ubuntu.com/security/CVE-2017-8348
-
report
https://ubuntu.com/security/CVE-2017-8349
-
report
https://ubuntu.com/security/CVE-2017-8350
-
report
https://ubuntu.com/security/CVE-2017-8351
-
report
https://ubuntu.com/security/CVE-2017-8352
-
report
https://ubuntu.com/security/CVE-2017-8353
-
report
https://ubuntu.com/security/CVE-2017-8354
-
report
https://ubuntu.com/security/CVE-2017-8355
-
report
https://ubuntu.com/security/CVE-2017-8356
-
report
https://ubuntu.com/security/CVE-2017-8357
-
report
https://ubuntu.com/security/CVE-2017-8765
-
report
https://ubuntu.com/security/CVE-2017-8830
-
report
https://ubuntu.com/security/CVE-2017-9098
-
report
https://ubuntu.com/security/CVE-2017-9141
-
report
https://ubuntu.com/security/CVE-2017-9142
-
report
https://ubuntu.com/security/CVE-2017-9143
-
report
https://ubuntu.com/security/CVE-2017-9144