Lucene search
+L

94 matches found

CVE
CVE
•added 2017/02/15 7:00 p.m.•104 views

CVE-2016-8862

CVE-2016-8862 concerns ImageMagick. The vulnerability is in the AcquireMagickMemory function of MagickCore/memory.c, where processing a crafted image (ImageMagick versions before 7.0.3.3) can trigger a memory allocation failure, with unspecified impact. The provided sources describe remote trigge...

8.8CVSS6.7AI score0.04202EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2017/02/15 7:00 p.m.•105 views

CVE-2016-8866

The CVE concerns ImageMagick (ImageMagick Core: MagickCore/memory.c) where AcquireMagickMemory on 7.x is vulnerable: versions before 7.0.3.8 (specifically 7.0.3.3 prior to 7.0.3.8) may trigger a memory allocation failure when processing a crafted image. This vulnerability is noted as a follow-up ...

8.8CVSS6.8AI score0.048EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
•added 2017/02/15 7:00 p.m.•46 views

CVE-2016-8866

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862...

7AI score0.048EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2017/02/15 7:00 p.m.•57 views

CVE-2016-8862

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure...

8.8CVSS6AI score0.04202EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/02/15 7:00 p.m.•70 views

CVE-2016-8866

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862...

8.8CVSS6.4AI score0.048EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/15 12:00 a.m.•6 views

CVE-2016-8866: Improper Restriction of Operations within the Bounds of a Memory Buffer

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862...

8.8CVSS5.7AI score0.048EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/15 12:00 a.m.•4 views

CVE-2016-8862: Improper Restriction of Operations within the Bounds of a Memory Buffer

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure...

8.8CVSS8.1AI score0.04202EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/01/05 12:00 a.m.•54 views

openSUSE Security Update : ImageMagick (openSUSE-2017-14)

This update for ImageMagick fixes the following issues : - CVE-2016-9556 Possible Heap-overflow found by fuzzing bsc1011130 - CVE-2016-9559 Possible NULL pointer access found by fuzzing bsc1011136 - CVE-2016-8707 Possible code execution in Tiff conver utility bsc1014159 - CVE-2016-8866 Memory...

8.8CVSS7.3AI score0.048EPSS
SaveExploits3References11
Tenable Nessus
Tenable Nessus
•added 2016/12/01 12:00 a.m.•43 views

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2952-1)

This update for ImageMagick fixes the following issues : - Memory allocation failure in AcquireMagickMemory CVE-2016-8862 bsc1007245 - update incomplete patch of CVE-2016-6823 bsc1001066 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...

8.8CVSS6.8AI score0.04885EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2016/10/26 8:51 a.m.•42 views

CVE-2016-8866

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862...

8.8CVSS7.2AI score0.048EPSS
SaveExploits1References1
OSV
OSV
•added 2016/10/21 12:00 a.m.•8 views

UBUNTU-CVE-2016-8862

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure...

8.8CVSS6.8AI score0.04202EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2016/10/21 12:00 a.m.•38 views

CVE-2016-8862

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure...

8.8CVSS6.9AI score0.04202EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/06/05 12:00 a.m.•1 views

PT-2016-7598

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.3.3 Description The issue is related to the AcquireMagickMemory function in MagickCore/memory.c, which allows remote attackers to have an unspecified impact via a crafted image. This is triggered by a memory...

8.8CVSS0.04202EPSS
SaveExploits2References102
FreeBSD
FreeBSD
•added 2012/07/28 12:00 a.m.•38 views

ImageMagick and GraphicsMagick -- DoS via specially crafted PNG file

Kurt Seifried reports: There is an issue in ImageMagick that is also present in GraphicsMagick. CVE-2011-3026 deals with libpng memory allocation, and limitations have been added so that a bad PNG can't cause the system to allocate a lot of memory and a denial of service. However on further...

6.8CVSS8.7AI score0.73039EPSS
SaveExploits1References4
Rows per page
Query Builder