Summary
It was discovered that ImageMagick incorrectly handled certain malformed
image files. If a user or automated system using ImageMagick were tricked
into opening a specially crafted image, an attacker could exploit this to
cause a denial of service or possibly execute code with the privileges of
the user invoking the program.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.15 |
| Ubuntu · 18.04 LTS 18.04:LTS | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.8 |
Vulnerabilities 30
-
Unscored —
A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid…
-
Unscored —
ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.
-
Unscored —
ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.
-
Unscored —
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c.
-
Unscored —
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.
-
Unscored —
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/i…
-
Unscored —
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut…
-
Unscored —
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assi…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strn…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one error…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLILis…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
-
Unscored —
In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorre…
-
Unscored —
ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.
-
Unscored —
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftIm…
-
Unscored —
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to c…
-
Unscored —
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and appli…
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
-
Unscored —
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
-
Unscored —
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
References
-
report
https://ubuntu.com/security/CVE-2019-12974
-
report
https://ubuntu.com/security/CVE-2019-12975
-
report
https://ubuntu.com/security/CVE-2019-12976
-
report
https://ubuntu.com/security/CVE-2019-12977
-
report
https://ubuntu.com/security/CVE-2019-12978
-
report
https://ubuntu.com/security/CVE-2019-12979
-
report
https://ubuntu.com/security/CVE-2019-13135
-
report
https://ubuntu.com/security/CVE-2019-13137
-
report
https://ubuntu.com/security/CVE-2019-13295
-
report
https://ubuntu.com/security/CVE-2019-13297
-
report
https://ubuntu.com/security/CVE-2019-13300
-
report
https://ubuntu.com/security/CVE-2019-13301
-
report
https://ubuntu.com/security/CVE-2019-13304
-
report
https://ubuntu.com/security/CVE-2019-13305
-
report
https://ubuntu.com/security/CVE-2019-13306
-
report
https://ubuntu.com/security/CVE-2019-13307
-
report
https://ubuntu.com/security/CVE-2019-13308
-
report
https://ubuntu.com/security/CVE-2019-13309
-
report
https://ubuntu.com/security/CVE-2019-13310
-
report
https://ubuntu.com/security/CVE-2019-13311
-
report
https://ubuntu.com/security/CVE-2019-13391
-
report
https://ubuntu.com/security/CVE-2019-13454
-
report
https://ubuntu.com/security/CVE-2019-14981
-
report
https://ubuntu.com/security/CVE-2019-15139
-
report
https://ubuntu.com/security/CVE-2019-15140
-
report
https://ubuntu.com/security/CVE-2019-16708
-
report
https://ubuntu.com/security/CVE-2019-16709
-
report
https://ubuntu.com/security/CVE-2019-16710
-
report
https://ubuntu.com/security/CVE-2019-16711
-
report
https://ubuntu.com/security/CVE-2019-16713