Lucene search
+L

2723 matches found

Veracode
Veracode
added 2018/12/19 7:36 a.m.33 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The user can input malicious DIB file to the ReadDIBImage function of coders/dib.c to trigger the attack. This vulnerability also affects GraphicsMagick...

6.5CVSS6.1AI score0.02278EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/18 12:00 a.m.10 views

The vulnerability of the GraphicsMagick graphic editor, related to the lack of checks for division by zero, allows a hacker to trigger a service failure.

The vulnerability of the GraphicsMagick graphic editor is related to an error that causes division by zero when reading MNG images from the png.c file. Exploiting this vulnerability can allow a remote attacker to cause the application to terminate abnormally using a specially crafted image...

6.5CVSS6.6AI score0.03079EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2018/12/17 8:29 p.m.7 views

DEBIAN-CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.4AI score0.02278EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/17 8:29 p.m.12 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.2AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2018/12/17 8:29 p.m.33 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.8AI score0.02278EPSS
SaveExploits1References5
OSV
OSV
added 2018/12/17 8:29 p.m.8 views

UBUNTU-CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.8AI score0.02278EPSS
SaveExploits1References6
NVD
NVD
added 2018/12/17 8:29 p.m.24 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.5AI score0.02278EPSS
SaveExploits1References6
Prion
Prion
added 2018/12/17 8:29 p.m.30 views

Information disclosure

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

4.3CVSS6.3AI score0.02278EPSS
SaveExploits1References6Affected Software2
Cvelist
Cvelist
added 2018/12/17 8:00 p.m.40 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

5.7AI score0.02278EPSS
SaveExploits1References6
CVE
CVE
added 2018/12/17 8:00 p.m.190 views

CVE-2018-20189

GraphicsMagick 1.3.31 is affected by CVE-2018-20189 in the ReadDIBImage function (coders/dib.c). A crafted DIB image that exploits direct pixel values with colormapping (not supported beyond 8-bits/sample) can trigger missing indexes initialization, causing a crash and denial of service. No furth...

6.5CVSS5.6AI score0.02278EPSS
SaveExploits1References6Affected Software1
Debian CVE
Debian CVE
added 2018/12/17 8:00 p.m.56 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.6AI score0.02278EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2018/12/17 8:00 p.m.58 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS5.9AI score0.02278EPSS
SaveExploits1
NVD
NVD
added 2018/12/17 7:29 p.m.22 views

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

6.5CVSS7AI score0.02307EPSS
SaveExploits1References6
OSV
OSV
added 2018/12/17 7:29 p.m.9 views

DEBIAN-CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

5.3CVSS6.8AI score0.02107EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/17 7:29 p.m.14 views

CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

5.3CVSS6.3AI score
SaveExploits0References6
OSV
OSV
added 2018/12/17 7:29 p.m.19 views

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

6.5CVSS6.6AI score
SaveExploits0References6
NVD
NVD
added 2018/12/17 7:29 p.m.20 views

CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

5.3CVSS6AI score0.02107EPSS
SaveExploits1References6
OSV
OSV
added 2018/12/17 7:29 p.m.4 views

DEBIAN-CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

6.5CVSS6.3AI score0.02307EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2018/12/17 7:29 p.m.35 views

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

6.5CVSS6.6AI score0.02307EPSS
SaveExploits1References5
Prion
Prion
added 2018/12/17 7:29 p.m.28 views

Heap overflow

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

4.3CVSS6.4AI score0.02307EPSS
SaveExploits1References6Affected Software2
Rows per page
Query Builder