4089 matches found
CVE-2016-7523
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
DEBIAN-CVE-2019-19948
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c...
DEBIAN-CVE-2019-19949
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magickpngwriterawprofile and LocaleNCompare...
UBUNTU-CVE-2019-19949
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magickpngwriterawprofile and LocaleNCompare...
GraphicsMagick magick/error.c file resource management error vulnerability
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A resource management error exists in the 'ThrowException' and 'ThrowLoggedException' functions of the magick/error.c file in GraphicsMagick Vulnerability. T...
CVE-2019-19950: Use After Free
In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c...
ImageMagick Studio ImageMagick Denial of Service Vulnerability
ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick Studio ImageMagick version 6.8.9.6. An attacker c...
Denial Of Service (DoS)
github.com/gographics/imagick is vulnerable to denial of service DOS attacks. The vulnerability exists in the GetImageHistogram function in magickwandimage.go. This is because the C.DestroyPixelWand gets called twice on a C.PixelWand when copies of the PixelWand objects are being made causing an...
The vulnerability of the ReadDCMImage function (coders/dcm.c) and the ReadPICTImage function (coders/pict.c) in the console-based graphic editor ImageMagick allows a hacker to cause a service failure.
The vulnerability of the ReadDCMImage function coders/dcm.c and ReadPICTImage function coders/pict.c in the console-based graphic editor ImageMagick exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service...
The vulnerability of the WriteWEBPImage function (coders/webp.c), a cross-platform library for working with graphics using GraphicsMagick, allows an attacker to execute arbitrary code.
The vulnerability of the WriteWEBPImage function coders/webp.c, a cross-platform library for working with graphics using GraphicsMagick, is related to a buffer overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
PT-2020-5523 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to several memory leaks in the MIFF coder due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead...
The vulnerability of the DescribeImage function (magick/describe.c) in the cross-platform library for working with graphics in GraphicsMagick allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the DescribeImage function in the cross-platform graphics library GraphicsMagick is related to a buffer overflow error. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...
The vulnerability of the ReadRLEImage function (coder/rle.c) in the cross-platform library for working with graphics in GraphicsMagick, allowing a hacker to cause a service failure.
The vulnerability of the ReadRLEImage function coder/rle.c in the cross-platform library for working with graphics in GraphicsMagick is related to a buffer overflow vulnerability. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created RLE fil...
CVE-2019-5642 MAGICK
Rapid7 Metasploit Pro version 4.16.0-2019081901 and prior suffers from an instance of CWE-732, wherein the unique server.key is written to the file system during installation with world-readable permissions. This can allow other users of the same system where Metasploit Pro is installed to...
PT-2019-5845 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/quantum.h, related to an integer overflow value. This issue allows a remote attacker to cause a denial of service using a specially crafted file...
Debian: Security Advisory (DLA-1948-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1948-1 : ruby-mini-magick security update
In lib/minimagick/image.rb in ruby-mini-magick, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernelopen, which accepts a '|' character followed by a command. For Debian 8 'Jessie', this problem has been fixed in version...
PT-2019-5855 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to multiple unconstrained pixel offset calculations in functions CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelIn...
[SECURITY] [DLA 1948-1] ruby-mini-magick security update
Package : ruby-mini-magick Version : 3.8.1-1+deb8u1 CVE ID : CVE-2019-13574 Debian Bug : 931932 In lib/minimagick/image.rb in ruby-mini-magick, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernelopen, which accepts a | charact...