Summary
It was discovered that ImageMagick incorrectly handled certain malformed
image files. If a user or automated system using ImageMagick were tricked
into opening a specially crafted image, an attacker could exploit this to
cause a denial of service or possibly execute code with the privileges of
the user invoking the program.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.8 |
| Ubuntu · 16.04 LTS 16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.8 |
Vulnerabilities 19
-
Unscored —
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers t…
-
Unscored —
The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory …
-
Unscored —
The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory …
-
Unscored —
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exha…
-
Unscored —
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle…
-
Unscored —
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file …
-
Unscored —
The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial …
-
Unscored —
The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive i…
-
Unscored —
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which …
-
Unscored —
coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or…
-
Unscored —
The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote att…
-
Unscored —
In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (me…
-
Unscored —
In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (me…
-
Unscored —
In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory …
-
Unscored —
In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak…
-
Unscored —
In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) …
-
Unscored —
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to…
-
Unscored —
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers …
-
Unscored —
In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to…
References
-
report
https://ubuntu.com/security/CVE-2017-9261
-
report
https://ubuntu.com/security/CVE-2017-9262
-
report
https://ubuntu.com/security/CVE-2017-9405
-
report
https://ubuntu.com/security/CVE-2017-9407
-
report
https://ubuntu.com/security/CVE-2017-9409
-
report
https://ubuntu.com/security/CVE-2017-9439
-
report
https://ubuntu.com/security/CVE-2017-9440
-
report
https://ubuntu.com/security/CVE-2017-9501
-
report
https://ubuntu.com/security/CVE-2017-10928
-
report
https://ubuntu.com/security/CVE-2017-11141
-
report
https://ubuntu.com/security/CVE-2017-11170
-
report
https://ubuntu.com/security/CVE-2017-11188
-
report
https://ubuntu.com/security/CVE-2017-11352
-
report
https://ubuntu.com/security/CVE-2017-11360
-
report
https://ubuntu.com/security/CVE-2017-11447
-
report
https://ubuntu.com/security/CVE-2017-11448
-
report
https://ubuntu.com/security/CVE-2017-11449
-
report
https://ubuntu.com/security/CVE-2017-11450
-
report
https://ubuntu.com/security/CVE-2017-11478