Cristy

**Nome do Software Vulnerável e Versões Afetadas** ImageMagick versões anteriores a 6.9.13-44 ImageMagick versões anteriores a 7.1.2-19 **Descrição** Um problema de heap use-after-free ocorre ao ler e imprimir valores de um perfil XMP inválido, o que pode causar o travamento do sistema. **Recomendações** Atualizar para a versão 6.9.13-44 ou posterior. Atualizar para a versão 7.1.2-19 ou posterior.

**Nome do Software Vulnerável e Versões Afetadas** Versões do ImageMagick anteriores a 7.1.1-44 **Descrição** O problema está relacionado à manipulação inadequada de `packet size` no processamento de imagens MIFF multiespectrais, o que está vinculado à renderização de todos os canais em uma ordem arbitrária. **Recomendações** Para versões anteriores a 7.1.1-44, atualize para a versão 7.1.1-44 ou posterior para resolver o problema.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.0.9-0 **Description** The issue is related to the implementation of XML PARSE HUGE in the ImageMagick console graphic editor, specifically in the coders/svg.c file, and is connected to insufficient input validation. This can be exploited by a remote attacker to cause a denial of service, potentially related to SVG and libxml2. **Recommendations** For versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 6.9.4-5 **Description** The issue is related to a buffer overflow in the `magick/memory.c` file of ImageMagick, which can be triggered by "too many exceptions" vectors, leading to a denial of service (application crash). This can be exploited by remote attackers. **Recommendations** For versions prior to 6.9.4-5, update to version 6.9.4-5 or later to resolve the issue. As a temporary workaround, consider restricting the input to prevent the buffer overflow until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 6.9.4-0 ImageMagick versions 7.x prior to 7.0.1-2 **Description** The issue concerns the DrawDashPolygon function in MagickCore/draw.c, which mishandles calculations of certain vertices integer data. This can be exploited by remote attackers via a crafted file, leading to a denial of service (buffer overflow and application crash) or possibly other unspecified impacts. **Recommendations** For ImageMagick versions prior to 6.9.4-0, update to version 6.9.4-0 or later. For ImageMagick versions 7.x prior to 7.0.1-2, update to version 7.0.1-2 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 6.9.4-0 ImageMagick versions 7.x prior to 7.0.1-2 **Description** The issue is related to the DrawImage function in MagickCore/draw.c, which makes an incorrect function call when attempting to locate the next token. This can be exploited by remote attackers using a crafted file, potentially causing a denial of service due to a buffer overflow and application crash, or possibly having other unspecified impacts. **Recommendations** For ImageMagick versions prior to 6.9.4-0, update to version 6.9.4-0 or later. For ImageMagick versions 7.x prior to 7.0.1-2, update to version 7.0.1-2 or later.