DeutschShown in its original language — a full translation is planned for a future version.
ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2017-08-06
Ein entfernter, anonymer oder authentifizierter Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (24)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-12691US | medium6.5 | — | ||
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. | ||||
| CVE-2017-13145US | medium6.5 | — | ||
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash. | ||||
| CVE-2017-13144US | medium6.5 | — | ||
In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the m… | ||||
| CVE-2017-13143US | high7.5 | — | ||
In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive info… | ||||
| CVE-2017-13142US | medium6.5 | — | ||
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files. | ||||
| CVE-2017-13141US | medium6.5 | — | ||
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c. | ||||
| CVE-2017-13140US | medium6.5 | — | ||
In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSem… | ||||
| CVE-2017-13139US | critical9.8 | — | ||
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk. | ||||
| CVE-2017-12671US | medium6.5 | — | ||
In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows… | ||||
| CVE-2017-12640US | high8.8 | — | ||
ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c. | ||||
| CVE-2017-12587US | high8.8 | — | ||
ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c. | ||||
| CVE-2017-12563US | medium6.5 | — | ||
In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service. | ||||
| CVE-2017-12434US | medium6.5 | — | ||
In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion fa… | ||||
| CVE-2017-12432US | medium6.5 | — | ||
In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service. | ||||
| CVE-2017-12431US | medium6.5 | — | ||
In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service. | ||||
| CVE-2017-12428US | high7.5 | — | ||
In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in… | ||||
| CVE-2017-11640US | medium6.5 | — | ||
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c. | ||||
| CVE-2017-11639US | medium6.5 | — | ||
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelL… | ||||
| CVE-2017-11537US | medium6.5 | — | ||
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incor… | ||||
| CVE-2017-11535US | medium6.5 | — | ||
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c. | ||||
showing 20 of 24
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS-2024-2432 vom 2024-01-23external
- Amazon Linux Security Advisory ALAS-2024-1926 vom 2024-03-19external
- Debian Security Advisory DLA-2366 vom 2020-09-08external
- National Vulnerability Database #CVE-2017-12418 vom 2017-08-04external
- National Vulnerability Database #CVE-2017-12428 vom 2017-08-04external
- National Vulnerability Database #CVE-2017-12429 vom 2017-08-04external
- National Vulnerability Database #CVE-2017-12430 vom 2017-08-04external
- National Vulnerability Database #CVE-2017-12431 vom 2017-08-04external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan