Summary
It was discovered that ImageMagick incorrectly handled certain malformed
image files. If a user or automated system using ImageMagick were tricked
into opening a specially crafted image, an attacker could exploit this to
cause a denial of service or possibly execute code with the privileges of
the user invoking the program.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.13+esm8 |
Vulnerabilities 10
-
Unscored —
In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attacke…
-
Unscored —
In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers …
-
Unscored —
In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the im…
-
Unscored —
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.
-
Unscored —
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function …
-
Unscored —
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.
-
Unscored —
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.
-
Unscored —
In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote at…
-
Unscored —
In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which…
-
Unscored —
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU an…
References
-
report
https://ubuntu.com/security/CVE-2017-12805
-
report
https://ubuntu.com/security/CVE-2017-12806
-
report
https://ubuntu.com/security/CVE-2017-13144
-
report
https://ubuntu.com/security/CVE-2018-16412
-
report
https://ubuntu.com/security/CVE-2018-16413
-
report
https://ubuntu.com/security/CVE-2018-17966
-
report
https://ubuntu.com/security/CVE-2018-18016
-
report
https://ubuntu.com/security/CVE-2018-18024
-
report
https://ubuntu.com/security/CVE-2018-18025
-
report
https://ubuntu.com/security/CVE-2018-20467