Lucene search
+L

56 matches found

Prion
Prion
added 2020/12/08 9:15 p.m.32 views

Out-of-bounds

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

4.3CVSS5.4AI score0.01028EPSS
SaveExploits1References3Affected Software2
UbuntuCve
UbuntuCve
added 2020/12/08 9:15 p.m.35 views

CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS6.8AI score0.01028EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2020/12/08 12:00 a.m.79 views

CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS6AI score0.01028EPSS
SaveExploits1
CVE
CVE
added 2020/12/08 12:00 a.m.194 views

CVE-2020-25665

CVE-2020-25665 affects ImageMagick’s PALM image coder (coders/palm.c). The vulnerability arises from an improper call to AcquireQuantumMemory() in WritePALMImage() that should offset by 256; this can lead to an out-of-bounds read later in the routine. The fix patches the call by adding 256 to byt...

5.5CVSS5.7AI score0.01028EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2020/12/08 12:00 a.m.46 views

CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.9AI score0.01028EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/12/07 12:00 a.m.21 views

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2020-70258)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

4.3CVSS7.6AI score0.01088EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/12/06 4:14 a.m.28 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. An out-of-bounds read in the PALM image coder at coders/palm.c due to an improper call to AcquireQuantumMemory in routine WritePALMImage allows an attacker to crash the application...

5.5CVSS4.2AI score0.01028EPSS
SaveExploits1References4Affected Software4
RedhatCVE
RedhatCVE
added 2020/11/24 7:24 p.m.38 views

CVE-2020-25665

A flaw was found in the PALM image coder at coders/palm.c where it makes an improper call to AcquireQuantumMemory in the WritePALMImage routine because it needs to be offset by 256. This issue causes an out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to...

5.5CVSS2.2AI score0.01028EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.7 views

The vulnerability of the ReadPALMImage function (coder/palm.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadPALMImage function in the coders/palm.c file of the cross-platform graphics library GraphicsMagick is related to a buffer overflow error when QuantumDepth equals 8. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

7.6CVSS8.1AI score0.01528EPSS
SaveExploits0References5Affected Software2
Positive Technologies
Positive Technologies
added 2019/10/07 12:00 a.m.12 views

PT-2019-5860 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the WritePALMImage function in the /coders/palm.c component of the ImageMagick console graphic editor. It is associated with an integer overflow value. Exploitation of...

9.1CVSS6.9AI score0.89855EPSS
SaveExploits68References351
Positive Technologies
Positive Technologies
added 2019/10/04 12:00 a.m.10 views

PT-2019-5866 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to the PALM image coder in ImageMagick, which makes an improper call to AcquireQuantumMemory in the WritePALMImage routine due to an offset of 256. This can cause an...

9.1CVSS7.1AI score0.89855EPSS
SaveExploits68References354
OSV
OSV
added 2017/12/20 9:29 a.m.8 views

UBUNTU-CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

7.5CVSS7.4AI score0.01528EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2017/12/20 9:29 a.m.10 views

CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

7.5CVSS8AI score0.01528EPSS
SaveExploits0References8
OSV
OSV
added 2017/12/20 9:29 a.m.8 views

DEBIAN-CVE-2017-17783

In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8...

7.5CVSS9.4AI score0.01528EPSS
SaveExploits0References1
OSV
OSV
added 2017/07/22 12:00 a.m.9 views

UBUNTU-CVE-2017-11537

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception FPE in the WritePALMImage function in coders/palm.c, related to an incorrect bits-per-pixel calculation...

6.5CVSS6.9AI score0.01867EPSS
SaveExploits1References3
OSV
OSV
added 2017/06/02 12:00 a.m.16 views

UBUNTU-CVE-2017-9407

In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service memory leak via a crafted file...

6.5CVSS6.8AI score0.01101EPSS
SaveExploits0References3
Veracode
Veracode
added 2017/03/21 7:37 a.m.40 views

Heap Overflow Through Palm Image Files

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible through a heap overflow when dealing with palm image files...

7.8CVSS7.2AI score0.01625EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2015/10/30 10:18 a.m.27 views

CVE-2007-0770

Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. NOTE: this issue is due to an incomplete patch for...

9.3CVSS8.2AI score0.05403EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2009/03/23 12:00 a.m.30 views

Ubuntu Update for imagemagick vulnerabilities USN-422-1

Ubuntu Update for Linux kernel vulnerabilities USN-422-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4221.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for imagemagick vulnerabilities USN-422-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

9.3CVSS0.5AI score0.05403EPSS
SaveExploits0References2
OSV
OSV
added 2009/02/10 6:59 a.m.14 views

CVE-2008-6070

Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770. NOTE: some of...

8.1AI score
SaveExploits0References6
Rows per page
Query Builder