Summary
It was discovered that ImageMagick incorrectly handled certain malformed
image files. If a user or automated system using ImageMagick were tricked
into opening a specially crafted image, an attacker could exploit this to
cause a denial of service or potentially leak sensitive information.
These vulnerabilities included heap and stack-based buffer overflows,
memory leaks, and improper handling of uninitialized values.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | imagemagick | 8:6.7.7.10-6ubuntu3.13+esm10 |
Vulnerabilities 25
-
Unscored —
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because …
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assi…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strn…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one error…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishan…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLILis…
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
-
Unscored —
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
-
Unscored —
ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.
-
Unscored —
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to c…
-
Unscored —
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and appli…
-
Unscored —
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application …
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
-
Unscored —
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
-
Unscored —
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
-
Unscored —
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
-
Unscored —
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
-
Unscored —
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
-
Unscored —
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, rela…
-
Unscored —
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
References
-
report
https://ubuntu.com/security/CVE-2019-7175
-
report
https://ubuntu.com/security/CVE-2019-13135
-
report
https://ubuntu.com/security/CVE-2019-13295
-
report
https://ubuntu.com/security/CVE-2019-13297
-
report
https://ubuntu.com/security/CVE-2019-13300
-
report
https://ubuntu.com/security/CVE-2019-13301
-
report
https://ubuntu.com/security/CVE-2019-13304
-
report
https://ubuntu.com/security/CVE-2019-13305
-
report
https://ubuntu.com/security/CVE-2019-13306
-
report
https://ubuntu.com/security/CVE-2019-13307
-
report
https://ubuntu.com/security/CVE-2019-13309
-
report
https://ubuntu.com/security/CVE-2019-13310
-
report
https://ubuntu.com/security/CVE-2019-13311
-
report
https://ubuntu.com/security/CVE-2019-13454
-
report
https://ubuntu.com/security/CVE-2019-15139
-
report
https://ubuntu.com/security/CVE-2019-15140
-
report
https://ubuntu.com/security/CVE-2019-15141
-
report
https://ubuntu.com/security/CVE-2019-16708
-
report
https://ubuntu.com/security/CVE-2019-16709
-
report
https://ubuntu.com/security/CVE-2019-16710
-
report
https://ubuntu.com/security/CVE-2019-16711
-
report
https://ubuntu.com/security/CVE-2019-16712
-
report
https://ubuntu.com/security/CVE-2019-16713
-
report
https://ubuntu.com/security/CVE-2019-19948
-
report
https://ubuntu.com/security/CVE-2019-19949