3958 matches found
Exploit for Improper Input Validation in Imagemagick
CVE-2016-3714 ImageMagick Code Execution CVE-2016-3714 imag...
ImageMagick Studio ImageMagick Arbitrary File Move Vulnerability
ImageMagick Studio ImageMagick is the United States a set of open source image processing software. ImageMagick Studio A security vulnerability in ImageMagick's MSL encoder allows remote attackers to build malicious images, upload and move arbitrary files...
DEBIAN-CVE-2016-3716
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image...
UBUNTU-CVE-2016-3716
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image...
UBUNTU-CVE-2016-3718
The 1 HTTP and 2 FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery SSRF attacks via a crafted image...
UBUNTU-CVE-2016-3714
The 1 EPHEMERAL, 2 HTTPS, 3 MVG, 4 MSL, 5 TEXT, 6 SHOW, 7 WIN, and 8 PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "ImageTragick."...
PT-2016-1813 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.3-10 ImageMagick versions 7.x prior to 7.0.1-1 Description: The issue exists due to insufficient input validation in the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders of the ImageMagick console...
PT-2016-3364 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 6.9.3-10 and earlier ImageMagick versions 7.x prior to 7.0.1-1 Description: The issue is related to the implementation of the HTTP and FTP protocols in ImageMagick, which allows remote attackers to conduct server-side...
How Spy Agencies Hacked into Israeli Military Drones to Collect Live Video Feeds
--- Featured Image Only. See Original leaked images below. In a joint surveillance program, the US intelligence agency NSA National Security Agency and the British intelligence agency GCHQ Government Communications Headquarters hacked into, decrypted, and tracked live video feeds of Israeli...
CVE-2015-8898
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image file...
UBUNTU-CVE-2015-8898
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image file...
UBUNTU-CVE-2015-8894
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service application crash via a crafted tga file...
UBUNTU-CVE-2015-8902
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a crafted PDB file...
UBUNTU-CVE-2015-8900
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service infinite loop via a crafted HDR file...
DEBIAN-CVE-2015-8005
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file...
UBUNTU-CVE-2014-9849
The png coder in ImageMagick allows remote attackers to cause a denial of service crash...
UBUNTU-CVE-2014-9822
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file...
UBUNTU-CVE-2014-9831
coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file...