CVE-2017-13144
In ImageMagick before 6.9.7-10, there is a crash (rather than a “width or height exceeds limit” error report) if the image dimensions are too large, as demonstrated by use of the mpc coder.
Read MoreAuthor: Cyberthreat Blog
Malicious script dropping an executable signed by Avast?, (Wed, Aug 23rd)
Yesterday, I found an interesting sample that I started to analyze… It reached my spam trap attached to an email in Portuguese with the subject: “Venho por meio desta solicitar orçamento dos produtos” (“I hereby...
Read MoreCVE-2017-13130
mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.
Read MoreCVE-2017-13134
In ImageMagick 7.0.6-6, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.
Read MoreCVE-2017-13133
In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
Read More