4090 matches found
gegl: shell expansion via a crafted pathname
Due to the use of the system command in the Magick-Load op used by gegl an attacker is able to craft a command line path that is able to lead to the execution of arbitrary shell commands that impacts availability, confidentiality and integrity...
CVE-2021-45463
Due to the use of the system command in the Magick-Load op used by gegl an attacker is able to craft a command line path that is able to lead to the execution of arbitrary shell commands that impacts availability, confidentiality and integrity...
UBUNTU-CVE-2021-45463
loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...
CVE-2021-45463
loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...
CVE-2021-45463: Undefined Security Weakness
loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...
PT-2021-6874
Name of the Vulnerable Software and Affected Versions GIMP versions prior to 2.10.30 GEGL versions prior to 0.4.34 Description The issue is related to the load cache function in GEGL, which is used by GIMP. It allows shell expansion when a pathname in a constructed command line is not escaped or...
[SECURITY] Fedora 34 Update: R-magick-2.7.3-2.fc34
Bindings to 'ImageMagick': the most comprehensive open-source image processing library available. Supports many common formats png, jpeg, tiff, pdf, etc and manipulations rotate, scale, crop, trim, flip, blur, etc. All operations are vectorized via the Magick++ STL meaning they operate either on ...
[SECURITY] Fedora 34 Update: converseen-0.9.9.2-2.fc34
Converseen is a batch image conversion tool and resizer written in C++ with Q t5 and Magick++. Converseen allows you to convert images in more than 100 different formats!...
Fedora: Security Advisory for R-magick (FEDORA-2021-b58af96f33)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-3962
A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this...
PT-2023-8789
Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description The issue is related to a stack-based buffer overflow in the coders/tiff.c component of the ImageMagick console graphic editor. This flaw can be exploited by tricking a user into opening ...
Fedora: Security Advisory for converseen (FEDORA-2021-df1fa3d3e0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for R-magick (FEDORA-2021-df1fa3d3e0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 35 Update: R-magick-2.7.3-2.fc35
Bindings to 'ImageMagick': the most comprehensive open-source image processing library available. Supports many common formats png, jpeg, tiff, pdf, etc and manipulations rotate, scale, crop, trim, flip, blur, etc. All operations are vectorized via the Magick++ STL meaning they operate either on ...
[SECURITY] Fedora 35 Update: converseen-0.9.9.2-2.fc35
Converseen is a batch image conversion tool and resizer written in C++ with Q t5 and Magick++. Converseen allows you to convert images in more than 100 different formats!...
The vulnerability of the coders/webp.c component in the console-based image editing tool ImageMagick, which stems from the lack of checks for division by zero, allows a hacker to trigger a service failure.
The vulnerability of the coders/webp.c component in the console-based image editing tool ImageMagick is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2021-35505
Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the magick binary...
CVE-2021-35505
Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the magick binary...
