jetlib.sec » Tags » imagemagick

Feeds

133433 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

37 items tagged "imagemagick"

Related tags: image [+], file [+], exchangeable image file format [+], denial of service [+], x window system [+], x window [+], red hat security [+], privilege escalation vulnerability [+], local privilege escalation [+], configure [+], configuration [+], overflow [+], mandriva linux [+], linux security [+], version [+], user [+], ubuntu [+], stack overflow [+], security [+], red [+], proof of concept [+], joonas [+], imagemagick utilities [+], hat [+], dsa [+], buffer overflow vulnerability [+], buffer overflow [+], buffer [+], automated system [+], piceditor [+], multiple [+], installation time [+], imagemagick library [+], denial [+], default option [+], coppermine [+], bugtraq [+], usn [+], regression [+], mdvsa [+], hijacking [+], exploits [+], dll [+], display [+]

• May 18, 2012
• 7:36

  Mandriva Linux Security Advisory 2012-078

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2012-078 - Multiple vulnerabilities has been found and corrected in imagemagick. A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format metadata. An attacker could create a specially-crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. A denial of service flaw was found in the way ImageMagick processed images with malformed Exif metadata. An attacker could create a specially-crafted image file that, when opened by a victim, could cause ImageMagick to enter an infinite loop. Various other issues have also been addressed.

  Tags:  image file imagemagick mandriva-linux exchangeable-image-file-format linux-security  

• 7:36

  Mandriva Linux Security Advisory 2012-078

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2012-078 - Multiple vulnerabilities has been found and corrected in imagemagick. A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format metadata. An attacker could create a specially-crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. A denial of service flaw was found in the way ImageMagick processed images with malformed Exif metadata. An attacker could create a specially-crafted image file that, when opened by a victim, could cause ImageMagick to enter an infinite loop. Various other issues have also been addressed.

  Tags:  image file imagemagick mandriva-linux exchangeable-image-file-format linux-security  

• 7:36

  Mandriva Linux Security Advisory 2012-078

   » ‎ Packet Storm Security Misc. Files
  Mandriva Linux Security Advisory 2012-078 - Multiple vulnerabilities has been found and corrected in imagemagick. A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format metadata. An attacker could create a specially-crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. A denial of service flaw was found in the way ImageMagick processed images with malformed Exif metadata. An attacker could create a specially-crafted image file that, when opened by a victim, could cause ImageMagick to enter an infinite loop. Various other issues have also been addressed.

  Tags:  image file imagemagick mandriva-linux exchangeable-image-file-format linux-security  

• May 17, 2012
• 12:29

  Mandriva Linux Security Advisory 2012-077

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2012-077 - Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory. A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format metadata. An attacker could create a specially-crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. A denial of service flaw was found in the way ImageMagick processed images with malformed Exif metadata. An attacker could create a specially-crafted image file that, when opened by a victim, could cause ImageMagick to enter an infinite loop. Various other issues have also been addressed.

  Tags:  imagemagick image file mandriva-linux exchangeable-image-file-format linux-security  

• 11:00

  Bugtraq: [ MDVSA-2012:078 ] imagemagick

   » ‎ SecurityFocus Vulnerabilities
  [ MDVSA-2012:078 ] imagemagick

  Tags:  bugtraq mdvsa imagemagick  

• 0:00

  Vuln: ImageMagick Buffer Overflow and Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick Buffer Overflow and Denial of Service Vulnerabilities

  Tags:  imagemagick buffer overflow buffer-overflow denial-of-service  

• 0:00

  Vuln: ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

  Tags:  imagemagick configure configuration privilege-escalation-vulnerability local-privilege-escalation  

• May 08, 2012
• 0:00

  Vuln: ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

  Tags:  imagemagick configure configuration privilege-escalation-vulnerability local-privilege-escalation  

• 0:00

  Vuln: ImageMagick Multiple Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick Multiple Denial of Service Vulnerabilities

  Tags:  imagemagick multiple denial denial-of-service  

• 0:00

  Vuln: ImageMagick Buffer Overflow and Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick Buffer Overflow and Denial of Service Vulnerabilities

  Tags:  imagemagick buffer overflow buffer-overflow denial-of-service  

• May 07, 2012
• 13:04

  Red Hat Security Advisory 2012-0544-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0544-01 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format metadata. An attacker could create a specially-crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. A denial of service flaw was found in the way ImageMagick processed images with malformed Exif metadata. An attacker could create a specially-crafted image file that, when opened by a victim, could cause ImageMagick to enter an infinite loop.

  Tags:  imagemagick image file x-window exchangeable-image-file-format x-window-system red-hat-security  

• 13:04

  Red Hat Security Advisory 2012-0544-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0544-01 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format metadata. An attacker could create a specially-crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. A denial of service flaw was found in the way ImageMagick processed images with malformed Exif metadata. An attacker could create a specially-crafted image file that, when opened by a victim, could cause ImageMagick to enter an infinite loop.

  Tags:  imagemagick image file x-window exchangeable-image-file-format x-window-system red-hat-security  

• 13:03

  Red Hat Security Advisory 2012-0545-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0545-01 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format metadata. An attacker could create a specially-crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. A denial of service flaw was found in the way ImageMagick processed images with malformed Exif metadata. An attacker could create a specially-crafted image file that, when opened by a victim, could cause ImageMagick to enter an infinite loop.

  Tags:  imagemagick image file x-window exchangeable-image-file-format x-window-system red-hat-security  

• 13:03

  Red Hat Security Advisory 2012-0545-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0545-01 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format metadata. An attacker could create a specially-crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. A denial of service flaw was found in the way ImageMagick processed images with malformed Exif metadata. An attacker could create a specially-crafted image file that, when opened by a victim, could cause ImageMagick to enter an infinite loop.

  Tags:  imagemagick image file x-window exchangeable-image-file-format x-window-system red-hat-security  

• 0:00

  Vuln: ImageMagick Multiple Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick Multiple Denial of Service Vulnerabilities

  Tags:  imagemagick multiple denial denial-of-service  

• 0:00

  Vuln: ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

  Tags:  imagemagick configure configuration privilege-escalation-vulnerability local-privilege-escalation  

• 0:00

  Vuln: ImageMagick Buffer Overflow and Denial of Service Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick Buffer Overflow and Denial of Service Vulnerabilities

  Tags:  imagemagick buffer overflow buffer-overflow denial-of-service  

• May 04, 2012
• 8:02

  Bugtraq: [SECURITY] [DSA 2462-2] imagemagick regression update

   » ‎ SecurityFocus Vulnerabilities
  [SECURITY] [DSA 2462-2] imagemagick regression update

  Tags:  security dsa imagemagick regression  

• May 01, 2012
• 14:34

  Ubuntu Security Notice USN-1435-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 1435-1 - Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain IFD structures. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. Various other issues were also addressed.

  Tags:  imagemagick user ubuntu denial-of-service joonas automated-system  

• 14:34

  Ubuntu Security Notice USN-1435-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 1435-1 - Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain IFD structures. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. Various other issues were also addressed.

  Tags:  imagemagick user ubuntu denial-of-service joonas automated-system  

• 14:34

  Ubuntu Security Notice USN-1435-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 1435-1 - Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain IFD structures. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service. Various other issues were also addressed.

  Tags:  imagemagick user ubuntu denial-of-service joonas automated-system  

• April 30, 2012
• 9:00

  Bugtraq: [SECURITY] [DSA 2462-1] imagemagick security update

   » ‎ SecurityFocus Vulnerabilities
  [SECURITY] [DSA 2462-1] imagemagick security update

  Tags:  security dsa imagemagick  

• March 07, 2012
• 11:00

  Bugtraq: [SECURITY] [DSA 2427-1] imagemagick security update

   » ‎ SecurityFocus Vulnerabilities
  [SECURITY] [DSA 2427-1] imagemagick security update

  Tags:  security dsa imagemagick  

• February 21, 2012
• 7:33

  Red Hat Security Advisory 2012-0301-03

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0301-03 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. It was found that ImageMagick utilities tried to load ImageMagick configuration files from the current working directory. If a user ran an ImageMagick utility in an attacker-controlled directory containing a specially-crafted ImageMagick configuration file, it could cause the utility to execute arbitrary code.

  Tags:  imagemagick hat red x-window imagemagick-utilities x-window-system red-hat-security  

• 7:33

  Red Hat Security Advisory 2012-0301-03

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0301-03 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. It was found that ImageMagick utilities tried to load ImageMagick configuration files from the current working directory. If a user ran an ImageMagick utility in an attacker-controlled directory containing a specially-crafted ImageMagick configuration file, it could cause the utility to execute arbitrary code.

  Tags:  imagemagick hat red x-window imagemagick-utilities x-window-system red-hat-security  

• 7:33

  Red Hat Security Advisory 2012-0301-03

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0301-03 - ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. It was found that ImageMagick utilities tried to load ImageMagick configuration files from the current working directory. If a user ran an ImageMagick utility in an attacker-controlled directory containing a specially-crafted ImageMagick configuration file, it could cause the utility to execute arbitrary code.

  Tags:  imagemagick hat red x-window imagemagick-utilities x-window-system red-hat-security  

• 0:00

  Vuln: ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

  Tags:  imagemagick configure configuration privilege-escalation-vulnerability local-privilege-escalation  

• March 21, 2011
• 12:36

  Imagemagick 6.6.8-5 Stack Overflow

   » ‎ Packet Storm Security Exploits
  Imagemagick version 6.6.8-5 with Libtiff version 6.9.4 appears to suffer from a buffer overflow vulnerability. Proof of concept .tif enclosed.

  Tags:  version imagemagick overflow buffer-overflow-vulnerability stack-overflow proof-of-concept  

• 12:36

  Imagemagick 6.6.8-5 Stack Overflow

   » ‎ Packet Storm Security Recent Files
  Imagemagick version 6.6.8-5 with Libtiff version 6.9.4 appears to suffer from a buffer overflow vulnerability. Proof of concept .tif enclosed.

  Tags:  version imagemagick overflow buffer-overflow-vulnerability stack-overflow proof-of-concept  

• 12:36

  Imagemagick 6.6.8-5 Stack Overflow

   » ‎ Packet Storm Security Misc. Files
  Imagemagick version 6.6.8-5 with Libtiff version 6.9.4 appears to suffer from a buffer overflow vulnerability. Proof of concept .tif enclosed.

  Tags:  version imagemagick overflow buffer-overflow-vulnerability stack-overflow proof-of-concept  

• December 27, 2010
• 0:00

  Vuln: ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

  Tags:  imagemagick configure configuration privilege-escalation-vulnerability local-privilege-escalation  

• December 23, 2010
• 0:00

  Vuln: ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

  Tags:  imagemagick configure configuration privilege-escalation-vulnerability local-privilege-escalation  

• December 08, 2010
• 9:00

  Bugtraq: [USN-1028-1] ImageMagick vulnerability

   » ‎ SecurityFocus Vulnerabilities
  [USN-1028-1] ImageMagick vulnerability

  Tags:  imagemagick bugtraq usn  

• December 07, 2010
• 0:00

  Vuln: ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  ImageMagick 'configure.c' Configuration File Loading Local Privilege Escalation Vulnerability

  Tags:  imagemagick configure configuration privilege-escalation-vulnerability local-privilege-escalation  

• October 28, 2010
• 14:00

  [local exploits] - ImageMagick Display v 1.0 DLL Hijacking Exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [local exploits] - ImageMagick Display v 1.0 DLL Hijacking Exploit

  Tags:  imagemagick dll display hijacking exploits  

• February 20, 2010
• 12:00

  coppermine_piceditor.rb.txt

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a vulnerability in the picEditor.php script of Coppermine Photo Gallery. When configured to use the ImageMagick library, the 'quality', 'angle', and 'clipval' parameters are not properly escaped before being passed. NOTE: Use of the ImageMagick library is a non-default option. However, a user can specify its use at installation time.

  Tags:  imagemagick piceditor coppermine imagemagick-library default-option installation-time  

• 12:00

  coppermine_piceditor.rb.txt

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a vulnerability in the picEditor.php script of Coppermine Photo Gallery. When configured to use the ImageMagick library, the 'quality', 'angle', and 'clipval' parameters are not properly escaped before being passed. NOTE: Use of the ImageMagick library is a non-default option. However, a user can specify its use at installation time.

  Tags:  imagemagick piceditor coppermine imagemagick-library default-option installation-time