339 matches found
CVE-2019-12979
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c...
UBUNTU-CVE-2019-12979
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c...
CVE-2019-12979
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c...
CVE-2019-12975
CVE-2019-12975 : ImageMagick 7.0.8-34 has a memory-leak vulnerability in WriteDPXImage (coders/dpx.c). The issue is a leak, with no described exploit vectors in the supplied documents. Connected sources also reference ImageMagick-related advisories and lists of CVEs; the MiracleLinux/Nessus entri...
CVE-2019-12974
A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image...
CVE-2019-12974
A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image...
PT-2019-5877 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8 through 7.0.34 Description: The issue is related to a NULL pointer dereference in the ReadPANGOImage and ReadVIDImage functions. This allows a remote attacker to cause a denial of service via a crafted image. There ...
PT-2019-5879 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-34 Description: The issue is related to the use of an uninitialized value in the ReadPANGOImage function in coders/pango.c, which can lead to incorrect initialization. This can potentially allow a remote attacker to...
PT-2019-13064 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-34 Description: The issue is related to a memory leak in the ReadPCLImage function, located in coders/pcl.c. Recommendations: For ImageMagick version 7.0.8-34, consider updating to a newer version that addresses the...
PT-2019-5178 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-34 Description: The issue is related to the use of an uninitialized value in the SyncImageSettings function in MagickCore/image.c, which is also connected to AcquireImage in magick/image.c. This could potentially all...
PT-2019-2862 · Imagemagick +1 · Imagemagick +1
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-50 Description: The issue is related to a heap-based buffer over-read in the GetPixelChannel function, located in MagickCore/pixel-accessor.h. This can be exploited by a remote attacker using a specially crafted...
PT-2019-2869 · Imagemagick +1 · Imagemagick +1
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-50 Description: The issue is related to a buffer over-read in the CompositeImage function of the MagickCore/composite.c module. This can be exploited by a remote attacker using a specially crafted image, potentially...
CVE-2019-12497
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. In the customer or external frontend, personal information of agents e.g., Name and mail address can be disclosed in external notes...
CVE-2019-12497
Removed by vendor...
PT-2019-13910 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 6.x through 6.9.10-41 ImageMagick versions 7.x through 7.0.8-41 Description: The issue is related to a use after free vulnerability in the UnmapBlob function. This vulnerability allows an attacker to cause a denial of...
PT-2019-5890 · Imagemagick +6 · Imagemagick +6
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-43 Q16 Description: The issue is related to a heap-based buffer over-read in the WritePNGImage function, which can allow a remote attacker to access confidential data and cause a denial of service. The problem is...
CVE-2019-11597
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...
ImageMagick Multiple Heap Buffer Overflow Vulnerabilities
Description ImageMagick is prone to multiple heap-based buffer-overflow vulnerabilities. An attacker can exploit these issues to cause denial-of-service condition. Due to the nature of these issues, code execution may be possible but this has not been confirmed. ImageMagick version 7.0.8-43 Q16 i...
CVE-2019-11472
ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error by crafting an XWD image file in which the header indicates neither LSB first nor MSB first...
