Lucene search
+L

3969 matches found

OSV
OSV
added 2017/03/22 6:59 p.m.9 views

CVE-2017-7231

pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issue affects the 'process' function of the 'pngdefry.c' source file...

7.8CVSS5.8AI score0.01469EPSS
SaveExploits1References2
Prion
Prion
added 2017/03/22 6:59 p.m.18 views

Heap overflow

pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issue affects the 'process' function of the 'pngdefry.c' source file...

6.8CVSS7.5AI score0.01469EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2017/03/21 8:29 a.m.19 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a png image to coders/pnm.c, causing the system to crash...

6.5CVSS7.2AI score0.02078EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2017/03/21 5:25 a.m.18 views

Denial Of Service (DoS) In Png Coder

ImageMagick is vulnerable to denial of service DoS attacks. The png coder in ImageMagick allows remote attackers to crash the system...

7.5CVSS7.5AI score0.03456EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/03/20 4:59 p.m.19 views

CVE-2014-9849

The png coder in ImageMagick allows remote attackers to cause a denial of service crash...

7.5CVSS7.2AI score0.03456EPSS
SaveExploits0References7
OSV
OSV
added 2017/03/20 4:59 p.m.12 views

CVE-2014-9849

The png coder in ImageMagick allows remote attackers to cause a denial of service crash...

7.5CVSS7.3AI score
SaveExploits0References15
OSV
OSV
added 2017/03/20 4:59 p.m.4 views

DEBIAN-CVE-2014-9849

The png coder in ImageMagick allows remote attackers to cause a denial of service crash...

7.5CVSS8.8AI score0.03456EPSS
SaveExploits0References1
Prion
Prion
added 2017/03/20 4:59 p.m.23 views

Code injection

The png coder in ImageMagick allows remote attackers to cause a denial of service crash...

5CVSS6.8AI score0.03456EPSS
SaveExploits0References7Affected Software9
CVE
CVE
added 2017/03/20 4:00 p.m.87 views

CVE-2014-9849

CVE-2014-9849 : The png coder in ImageMagick is vulnerable to remote denial of service, allowing a remote attacker to crash the process. The description in the initial document confirms a DoS via the png coder, and connected sources reiterate the same CVE with no additional exploit details. The p...

7.5CVSS7.1AI score0.03456EPSS
SaveExploits0References7Affected Software7
Cvelist
Cvelist
added 2017/03/20 4:00 p.m.29 views

CVE-2014-9849

The png coder in ImageMagick allows remote attackers to cause a denial of service crash...

7.2AI score0.03456EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2017/03/20 4:00 p.m.22 views

CVE-2014-9849

The png coder in ImageMagick allows remote attackers to cause a denial of service crash...

7.5CVSS8.3AI score0.03456EPSS
SaveExploits0
OSV
OSV
added 2017/03/17 9:59 a.m.7 views

DEBIAN-CVE-2017-6961

An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash. This is related to the readchunk function using the pChunk-size value within the PNG file to determine the amount of memory to allocate...

5.5CVSS5.9AI score0.01168EPSS
SaveExploits0References1
Prion
Prion
added 2017/03/17 9:59 a.m.10 views

Design/Logic Flaw

An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash. This is related to the readchunk function using the pChunk-size value within the PNG file to determine the amount of memory to allocate...

4.3CVSS5.6AI score0.01168EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2017/03/16 8:19 a.m.23 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible due to a flaw in the SpliceImage function which allows attackers to crash an application using a png file...

5.5CVSS6.7AI score0.03625EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2017/03/15 7:59 p.m.4 views

DEBIAN-CVE-2015-8897

The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...

5.5CVSS6.6AI score0.03625EPSS
SaveExploits0References1
NVD
NVD
added 2017/03/15 7:59 p.m.16 views

CVE-2015-8897

The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...

5.5CVSS6.7AI score0.03625EPSS
SaveExploits0References6
Prion
Prion
added 2017/03/15 7:59 p.m.17 views

Code injection

The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...

4.3CVSS6.7AI score0.03625EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2017/03/15 7:59 p.m.10 views

CVE-2015-8897

The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...

5.5CVSS7.6AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2017/03/15 7:00 p.m.22 views

CVE-2015-8897

The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...

5.5CVSS7AI score0.03625EPSS
SaveExploits0
CVE
CVE
added 2017/03/15 7:00 p.m.104 views

CVE-2015-8897

Summary (CVE-2015-8897) : The vulnerability affects ImageMagick, specifically the SpliceImage function in MagickCore/transform.c. Before version 6.9.2-4, processing a crafted PNG file can trigger a denial of service (application crash) in remote scenarios. The available connected documents consis...

5.5CVSS6.5AI score0.03625EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder