CVE-2021-35505

CVE-2021-35505 affects Afian FileRun 2021.03.26. The vulnerability enables Remote Code Execution by administrators via the Check Path value for the magick binary. The description identifies a path/command handling issue in the magick binary check, leading to code execution with the attacker’s cho...

CVE-2021-35505

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the magick binary...

CVE-2021-35505: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the magick binary...

PT-2021-20945

Name of the Vulnerable Software and Affected Versions: Afian FileRun version 2021.03.26 Description: The issue allows remote code execution by administrators through the Check Path value for the magick binary. Recommendations: For Afian FileRun version 2021.03.26, consider restricting access to t...

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick is related to the execution of operations that exceed the allowable buffer data size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created BMP file...

The vulnerability of the coders/txt.c component in the console-based image editing tool ImageMagick, related to integer overflow of values, allows a hacker to trigger a service failure.

The vulnerability of the coders/txt.c component in the console-based ImageMagick graphics editor is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

The vulnerability of the MagickCore/resize.c component of the console-based image editing tool ImageMagick, related to division by zero, allows a hacker to cause a service failure.

The vulnerability of the MagickCore/resize.c component in the console-based image editing tool ImageMagick is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

The vulnerability of the IntensityCompare() function in the /MagickCore/quantize.c component of the ImageMagick console graphics editor allows a malicious actor to cause a service failure by manipulating integer overflow values.

The vulnerability of the IntensityCompare function in the /MagickCore/quantize.c component of the ImageMagick console graphics editor is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created file...

The vulnerability of the `ApplyEvaluateOperator()` function in the `/MagickCore/statistic.c` file of the ImageMagick console graphics editor allows a malicious actor to cause a service failure by exploiting a numerical overflow condition.

The vulnerability of the ApplyEvaluateOperator function in the /MagickCore/statistic.c file of the ImageMagick console graphics editor allows for integer overflow of values. Exploiting this vulnerability enables a remote attacker to cause a service failure using a specially created file...

The vulnerability of the MagickCore/quantum.h component of the console-based image editing tool ImageMagick, related to integer overflow of values, allows a hacker to cause a service failure.

The vulnerability of the MagickCore/quantum.h component in the console-based image editing tool ImageMagick is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created file...

The vulnerability of the PersistPixelCache function in the magick/cache.c component of the console image-editing software ImageMagick, related to the assignment of a null pointer, allows a hacker to cause a service failure.

The vulnerability of the PersistPixelCache function in the magick/cache.c component of the console-based image editing tool ImageMagick is related to the use of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

The vulnerabilities of the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the console image editor ImageMagick components, related to the lack of data validation, allow attackers to trigger service interruptions.

The vulnerability of the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the ImageMagick console graphic editor’s code components coders/dcm.c, coders/pwp.c, coders/cals.c, and coders/p Pict.c is related to the lack of data validation during function execution. Exploitin...

The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows a hacker to cause a service failure.

The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created mng file...

The vulnerability of the ReadTXTImage function in the coders/txt.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the ReadTXTImage function in the coders/txt.c component of the console image editing tool ImageMagick is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created image file...

The vulnerability of the `saveBinaryCLProgram` function in the `magick/opencl.c` component of the ImageMagick console graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the saveBinaryCLProgram function in the magick/opencl.c component of the ImageMagick console graphics editor allows for the manipulation of zero-point pointers. Exploiting this vulnerability enables a remote attacker to gain access to confidential data, compromise its...

The vulnerability of the ReadPSDImage function in the coders/psd.c component of the console-based image editing tool ImageMagick allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadPSDImage function in the coders/psd.c component of the ImageMagick console graphics editor is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...

The vulnerability of the ExtractPostscript function in the coders/wpg.c component of the console-based ImageMagick graphics editor allows a violator to trigger a service failure due to a flaw in the resource consumption monitoring mechanism.

The vulnerability of the ExtractPostscript function in the coders/wpg.c component of the console-based ImageMagick graphics editor is related to a resource management mechanism error. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created wpg imag...

PT-2021-7758

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.10-31 Description The issue is related to a NULL pointer dereference flaw in the ReadSVGImage function of the coders/svg.c component. This flaw is caused by not checking the return value from libxml2's...