923 matches found
CVE-2014-9824
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9825...
CVE-2014-9816
ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted viff file...
CVE-2014-9806
ImageMagick allows remote attackers to cause a denial of service file descriptor consumption via a crafted file...
CVE-2014-9817
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file...
CVE-2014-9811
The xwd file handler in ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a malformed xwd file...
CVE-2014-9804
vision.c in ImageMagick allows remote attackers to cause a denial of service infinite loop via vectors related to "too many object."...
ImageMagick memory corruption vulnerability (CNVD-2017-05644)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory corruption vulnerability exists in the 'ReadPCXImage' function in the coders/pcx.c file in ImageMagick versio...
ImageMagick 'coders/wpg.c' File Denial of Service Vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the coders/wpg.c file in ImageMagick. A remote attacker could exploit this vulnerability t...
CVE-2017-5508
Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service application crash via a crafted TIFF file...
CVE-2016-10144
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...
Denial Of Service (DoS) Through Buffer Overflow
ImageMagick is vulnerable to denial of service DoS attacks through a buffer overflow and other attacks. This is because attackers can exploit the WriteProfile function in coders/jpeg.c to cause a denial of service. It can be triggered using an image file...
Buffer Overflow
ImageMagick is vulnerable to denial of service DoS attacks and possibly other attacks. These attacks are possible through a buffer overflow that occurs in coders/tiff.c. It can be triggered using a tiff file...
CVE-2016-10046
Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service application crash via a crafted image file...
CVE-2016-10047
Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service memory consumption via a crafted XML file...
CVE-2016-10056
Buffer overflow in the sixeldecode function in coders/sixel.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...
CVE-2016-10052
Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...
CVE-2016-10053
The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...
CVE-2016-10048
Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors...
The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to manipulate cross-site requests
The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of using negative numbers when specifying field sizes. Exploiting this vulnerability can allow a malicious actor, operating remotely, to manipulate inter-domain requests using a specially created pict...