Lucene search
+L

124 matches found

BDU FSTEC
BDU FSTEC
•added 2021/07/02 12:00 a.m.•11 views

The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows a hacker to cause a service failure.

The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created mng file...

6.5CVSS7AI score0.03067EPSS
SaveExploits1References10Affected Software3
OpenVAS
OpenVAS
•added 2020/07/31 12:00 a.m.•32 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.03716EPSS
SaveExploits18References2
OSV
OSV
•added 2020/07/28 12:00 a.m.•7 views

OSV-2020-1404 Use-of-uninitialized-value in LosslessReduceDepthOK

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22581 Crash type: Use-of-uninitialized-value Crash state: LosslessReduceDepthOK ReadOneMNGImage ReadMNGImage...

7.2AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2020/06/04 4:41 p.m.•25 views

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6605824029097984 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2020/06/02 12:04 a.m.•24 views

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4848610713010176 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

6.8AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2019/12/24 1:15 a.m.•20 views

CVE-2019-19952

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

9.8CVSS6.6AI score
SaveExploits0References1
Prion
Prion
•added 2019/12/24 1:15 a.m.•27 views

Design/Logic Flaw

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

7.5CVSS9.3AI score0.0223EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2019/12/24 1:15 a.m.•23 views

CVE-2019-19952

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

9.8CVSS7.2AI score0.0223EPSS
SaveExploits1References1
CVE
CVE
•added 2019/12/24 12:06 a.m.•233 views

CVE-2019-19952

CVE-2019-19952 is a use-after-free in MngInfoDiscardObject (coders/png.c, ReadOneMNGImage) of ImageMagick. The connected Red Hat advisory notes this as an unpatched vulnerability for RHEL6; no patch version or workaround details are provided in the supplied documents. Monitor for vendor updates a...

9.8CVSS9.2AI score0.0223EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2019/12/24 12:06 a.m.•59 views

CVE-2019-19952

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

9.8CVSS9.4AI score0.0223EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2019/12/24 12:06 a.m.•74 views

CVE-2019-19952

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

9.8CVSS9.4AI score0.0223EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/24 12:00 a.m.•3 views

CVE-2019-19952: Use After Free

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

9.8CVSS8.2AI score0.0223EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2018/05/22 10:49 p.m.•31 views

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

6.5CVSS4.7AI score0.01189EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/05/21 12:00 a.m.•19 views

ImageMagick Memory Misreference Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in ReadOneMNGImage in coders/png.c in ImageMagick 7.0.7-16 Q16 x8664 2017-12-25. An attacker can exploit this vulnerability ...

6.5CVSS6.1AI score0.01189EPSS
SaveExploits1References1
Prion
Prion
•added 2018/05/18 7:29 p.m.•30 views

Double free

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

4.3CVSS6.2AI score0.01189EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/18 12:00 a.m.•2 views

CVE-2017-18272: Use After Free

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

6.5CVSS6.7AI score0.01189EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2018/04/21 3:46 a.m.•19 views

imagemagick/ping_mng_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5221778856083456 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmngfuzzer Fuzz target binary: pingmngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2018/04/17 12:00 a.m.•5 views

ImageMagick 'ReadOneMNGImage' function infinite loop vulnerability

ImageMagick is a set of open source image processing software. The software can read, convert and write images in a variety of formats. A security vulnerability exists in the 'ReadOneMNGImage' function in the coders/png.c file in ImageMagick version 7.0.7-28. A remote attacker can exploit this...

6.5CVSS6.7AI score0.03067EPSS
SaveExploits1References1
OSV
OSV
•added 2018/04/16 11:29 p.m.•32 views

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

6.5CVSS6.4AI score
SaveExploits0References3
NVD
NVD
•added 2018/04/16 11:29 p.m.•20 views

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

6.5CVSS7.2AI score0.03067EPSS
SaveExploits1References3
Rows per page
Query Builder