CVE-2017-12663
https://notcve.org/view.php?id=CVE-2017-12663
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c. ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WriteMAPImage en coders/map.c. • https://github.com/ImageMagick/ImageMagick/commit/1dc0ac5016f1c4d50b100a086526d6a2453a5444 https://github.com/ImageMagick/ImageMagick/issues/573 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVE-2017-12675
https://notcve.org/view.php?id=CVE-2017-12675
In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service. Se ha encontrado un problema en ImageMagick 7.0.6-3 de falta de comprobación de datos multidimensionales en coders/mat.c, que conduce a una fuga de memoria en la función ReadImage en MagickCore/constitute.c. Esto provoca que los atacantes puedan causar denegaciones de servicio. • https://github.com/ImageMagick/ImageMagick/issues/616 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVE-2017-12669
https://notcve.org/view.php?id=CVE-2017-12669
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c. ImageMagick 7.0.6-2 tiene una vulnerabilidad de filtrado de memoria en WriteCALSImage en coders/cals.c. • https://github.com/ImageMagick/ImageMagick/commit/73b6c35cede48ccb2e29dbe62c2d77488e5e70b7 https://github.com/ImageMagick/ImageMagick/issues/571 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVE-2017-12673
https://notcve.org/view.php?id=CVE-2017-12673
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-3 en la función ReadOneMNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio. • http://www.securityfocus.com/bid/100228 https://github.com/ImageMagick/ImageMagick/issues/619 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVE-2017-12671
https://notcve.org/view.php?id=CVE-2017-12671
In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service. Se ha encontrado un problema de falta de asignación NULL en ImageMagick 7.0.6-3 en coders/mat.c, que conduce a una liberación no válida (invalid free) en la función DestroyImage en MagickCore/image.c. Esto provoca que los atacantes puedan causar denegaciones de servicio. • https://github.com/ImageMagick/ImageMagick/issues/621 https://www.debian.org/security/2017/dsa-4019 • CWE-416: Use After Free •