76 matches found
CVE-2020-15121
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...
ImageMagick: memory leak in WritePDBImage in coders/pdb.c
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c...
Operation ShadowHammer: a high-profile supply chain attack
In late March 2019, we briefly highlighted our research on ShadowHammer attacks, a sophisticated supply chain attack involving ASUS Live Update Utility, which was featured in a Kim Zetter article on Motherboard. The topic was also one of the research announcements made at the SAS conference, whic...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a pdb file to the application to cause a out-of-bounds read that can crash the application...
Denial Of Service (DoS) Via CPU Exhaustion
ImageMagick is vulnerable to denial of serviceDoS attacks. The attacks can be caused by passing a malicious PDB file to ReadPDBImage function in coders/pdb.c...
ImageMagick Denial of Service Vulnerability (CNVD-2017-21000)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadPDBImage' function of the coders/pdb.c file in ImageMagick versio...
Denial Of Service (DoS) Through Memory Leak
ImageMagick is vulnerable to denial of service DoS attacks through memory leaks. A malicious user can pass a pdb file to the application to cause a memory leak. This can lead to the system running out of memory and crashing...
CVE-2016-7537
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted PDB file...
CVE-2016-7531
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PDB file...
DEBIAN-CVE-2016-7531
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PDB file...
Out-of-bounds
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PDB file...
CVE-2016-7531
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PDB file...
Out-of-bounds
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted PDB file...
CVE-2016-7531
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PDB file...
DEBIAN-CVE-2016-7537
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted PDB file...
CVE-2016-7537
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted PDB file...
CVE-2016-7537
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted PDB file...
CVE-2016-7531
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PDB file...