
CVE-2017-12640 – Debian Security Advisory 4019-1
https://notcve.org/view.php?id=CVE-2017-12640
07 Aug 2017 — ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c. ImageMagick 7.0.6-1 tiene una vulnerabilidad de lectura fuera de límites en ReadOneMNGImage en coders/png.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user inv... • http://www.securityfocus.com/bid/100155 • CWE-125: Out-of-bounds Read •

CVE-2017-12641
https://notcve.org/view.php?id=CVE-2017-12641
07 Aug 2017 — ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c. ImageMagick 7.0.6-1 tiene una vulnerabilidad de filtración de memoria en ReadOneJNGImage en coders\png.c. • https://github.com/ImageMagick/ImageMagick/commit/c9aa9f80828594eacbe3affe16c43d623562e5d8 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVE-2017-12642
https://notcve.org/view.php?id=CVE-2017-12642
07 Aug 2017 — ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c. ImageMagick 7.0.6-1 tiene una vulnerabilidad de filtración de memoria en ReadMPCImage en coders\mpc.c. • http://www.securityfocus.com/bid/100159 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVE-2017-12643 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-12643
07 Aug 2017 — ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c. ImageMagick 7.0.6-1 tiene una vulnerabilidad de agotamiento de memoria en ReadOneJNGImage en coders\png.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invokin... • http://www.securityfocus.com/bid/100218 • CWE-770: Allocation of Resources Without Limits or Throttling •

CVE-2017-12644 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-12644
07 Aug 2017 — ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c. ImageMagick 7.0.6-1 tiene una vulnerabilidad de filtración de memoria en ReadDCMImage en coders\dcm.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program... • http://www.securityfocus.com/bid/100162 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVE-2017-12587 – Debian Security Advisory 4019-1
https://notcve.org/view.php?id=CVE-2017-12587
06 Aug 2017 — ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c. ImageMagick 7.0.6-1 tiene una importante vulnerabilidad de bucle en la función ReadPWPImage en coders\pwp.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user in... • https://github.com/ImageMagick/ImageMagick/issues/535 • CWE-834: Excessive Iteration •

CVE-2017-12563 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-12563
05 Aug 2017 — In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service. Se ha encontrado una vulnerabilidad de agotamiento de memoria en ImageMagick 7.0.6-2 en la función ReadPSDImage en coders/psd.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick w... • http://www.securityfocus.com/bid/100153 • CWE-770: Allocation of Resources Without Limits or Throttling •

CVE-2017-12564
https://notcve.org/view.php?id=CVE-2017-12564
05 Aug 2017 — In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-2 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio. • http://www.securityfocus.com/bid/100161 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVE-2017-12565
https://notcve.org/view.php?id=CVE-2017-12565
05 Aug 2017 — In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-2 en la función ReadOneJNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio. • http://www.securityfocus.com/bid/100156 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVE-2017-12566
https://notcve.org/view.php?id=CVE-2017-12566
05 Aug 2017 — In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the function ReadSVGImage in svg.c. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.6-2 en la función ReadMVGImage en coders/mvg.c. Esta vulnerabilidad permite que los atacantes causen una denegación de servicio relacionada con la función ReadSVGImage en svg.c. • https://github.com/ImageMagick/ImageMagick/issues/603 • CWE-772: Missing Release of Resource after Effective Lifetime •