Summary
It was discovered that GraphicsMagick incorrectly handled certain image files.
An attacker could possibly use this issue to cause a denial of service or other
unspecified impact.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | graphicsmagick | 1.3.23-1ubuntu0.5 |
Vulnerabilities 10
-
Unscored —
The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which…
-
Unscored —
The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are ass…
-
Unscored —
coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow …
-
Unscored —
WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream…
-
Unscored —
ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over…
-
Unscored —
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
-
Unscored —
ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer o…
-
Unscored —
ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer o…
-
Unscored —
In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders/png.c, related to oFFs c…
-
Unscored —
In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8.
References
-
report
https://ubuntu.com/security/CVE-2017-16545
-
report
https://ubuntu.com/security/CVE-2017-16547
-
report
https://ubuntu.com/security/CVE-2017-16669
-
report
https://ubuntu.com/security/CVE-2017-17498
-
report
https://ubuntu.com/security/CVE-2017-17500
-
report
https://ubuntu.com/security/CVE-2017-17501
-
report
https://ubuntu.com/security/CVE-2017-17502
-
report
https://ubuntu.com/security/CVE-2017-17503
-
report
https://ubuntu.com/security/CVE-2017-17782
-
report
https://ubuntu.com/security/CVE-2017-17783