116 matches found
Ubuntu USN-784-1 (imagemagick)
The remote host is missing an update to imagemagick announced via advisory USN-784-1. OpenVAS Vulnerability Test $Id: ubuntu7841.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7841.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-784-1 imagemagick Authors:...
CVE-2009-1882
CVE-2009-1882 involves an integer overflow in ImageMagick’s XMakeImage routine (magick/xwindow.c) and affects GraphicsMagick as reported in multiple advisories. A crafted TIFF image can trigger a heap-based buffer overflow, leading to a crash and potentially arbitrary code execution. Public refer...
ImageMagick Buffer Overflow Vulnerability (Windows)
The host is installed with ImageMagick and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodimagemagickbofvulnwin.nasl 8173 2017-12-19 11:45:56Z cfischer $ ImageMagick Buffer Overflow Vulnerability Windows Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...
ImageMagick Buffer Overflow Vulnerability - Windows
ImageMagick is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"...
ImageMagick < 6.5.2-9 magick/xwindow.c XMakeImage() Function TIFF File Handling Overflow
The remote Windows host is running a version of ImageMagick earlier than 6.5.2-9. Such versions reportedly fail to properly handle malformed 'TIFF' files in the 'XMakeImage' function. If an attacker can trick a user on the remote host into opening a specially crafted file using the affected...
Code injection
The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...
CVE-2008-1984
The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...
CVE-2008-1984
The eTrust Common Services Transport Daemon eCSqdmn in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service crash or CPU consumption via a malformed packet to TCP port 1882...
CVE-2007-1882
The CVE-2007-1882 entry affects HP Mercury Quality Center 9.0, build 9.1.0.4352. The vulnerability lies in qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment, where remote authenticated users can execute arbitrary SQL commands via the RunQuery method. Documents confirm the affected component and t...
CVE-2006-1882
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln 1 APPS03 in a iProcurement; 2 APPS04 in b Oracle Application Object Library; 3 APPS06, 4 APPS07, and 5 APPS08 in c Oracle Applications Technology...
CVE-2006-1882
CVE-2006-1882 affects Oracle E-Business Suite and Applications 11.5.10. The vulnerabilities span multiple areas: (1) APPS03 in iProcurement; (2) APPS04 in Oracle Application Object Library; (3) APPS06, APPS07, APPS08 in Oracle Applications Technology Stack; and (6) APPS11 in Oracle Order Capture....
CVE-2002-1882
The CVE-2002-1882 entry concerns Oracle E-Business Suite 11i (11.1–11.6) with a vulnerability in AolSecurityPrivate.class that could allow remote attackers to bypass user authentication checks. The described root cause is via unknown attack vectors; there are no explicit remediation details or ve...
CVE-2005-1882
CVE-2005-1882 (YaPiG) — YaPiG is a PHP-based image gallery. The vulnerability is a PHP Remote File Inclusion in last_gallery.php that allows an attacker to execute arbitrary PHP code by supplying a crafted YAPIG_PATH parameter in YaPiG versions 0.93u and 0.94u. The linked OpenVAS/NVD entries corr...
CVE-2004-1882
CVE-2004-1882 concerns CactuShop 5.x (ASP). The vulnerability is a cross-site scripting (XSS) flaw in the script popuplargeimage.asp, exploitable via the user-controlled parameter strImageTag . OpenVAS notes that the remote host runs CactuShop and that lack of sanitization can enable execution of...