CVE-2016-10069

CVE-2016-10069 affects ImageMagick (before 6.9.4-5). The vulnerability in coders/mat.c allows a remote attacker to cause an application crash (DoS) by sending a MAT file with an invalid number of frames. The issue is triggered during MAT file processing, leading to denial of service without requi...

CVE-2016-10062

CVE-2016-10062 is a vulnerability in ImageMagick where ReadGROUP4Image in coders/tiff.c does not check the return value of fwrite, enabling a crafted TIFF file to cause a denial of service (application crash). Affected: ImageMagick (ReadGROUP4Image in TIFF handling). The provided documents do not...

CVE-2016-5240

The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service infinite loop by converting a circularly defined SVG file...

CVE-2015-8902

The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a crafted PDB file...

CVE-2015-8903

The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a crafted VICAR file...

UBUNTU-CVE-2016-8866

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862...

DEBIAN-CVE-2016-7799

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-5842

MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read...

CVE-2016-5841

Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via vectors involving the offset variable...

CVE-2016-5691

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of 1 pixel.red, 2 pixel.green, and 3 pixel.blue...

CVE-2016-5688

The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger 1 a heap-based buffer overflow in the SetPixelIndex function or an invali...

CVE-2016-5687

The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read...

ImageMagick heap buffer overflow vulnerability (CNVD-2016-11688)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A heap buffer overflow vulnerability exists in ImageMagick version 7.0.3.6, which stems from the program failing to...

F5 Networks BIG-IP : ImageMagick vulnerability (K68785753)

The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image file. CVE-2015-8898 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

PT-2016-7355 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to an off-by-one error in the magick/cache.c file of ImageMagick, which allows remote attackers to cause a denial of service, resulting in a segmentation fault. The...

PT-2016-7375 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted WPG file. This is due to a problem in the ReadWPGImage function in coders/wpg.c...

CVE-2016-5010

coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF file...

ImageMagick integer overflow vulnerability (CNVD-2016-04386)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. An integer overflow vulnerability exists in ImageMagick. An attacker can exploit this vulnerability to execute arbitra...

ImageMagick: Integer and buffer overflow in coders/icon.c

Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service application crash via a crafted length value, which triggers a buffer overflow...

ImageMagick Denial of Service Vulnerability (CNVD-2016-03861)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'DrawImage' function in the MagickCore/draw.c file in versions of...