1560 matches found
CVE-2017-11525
The CVE-2017-11525 entry corresponds to ImageMagick’s ReadCINImage function (coders/cin.c). A crafted CIN file can cause memory consumption leading to denial of service, affecting ImageMagick builds before 6.9.9-0 and 7.x before 7.0.6-1. The provided connected documents confirm this vulnerability...
CVE-2017-11532
CVE-2017-11532 is rejected and not used; this CVE entry does not represent an active vulnerability.
CVE-2017-11531
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage function in coders/histogram.c...
CVE-2017-11532
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage function in coders/mpc.c...
CVE-2017-11531
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage function in coders/histogram.c...
CVE-2017-11535
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage function in coders/ps.c...
CVE-2017-11538
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage function in coders/png.c...
CVE-2017-11534
CVE-2017-11534 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2017-11540
ImageMagick 7.0.6-1 processing a crafted file in convert can cause a heap-based buffer over-read in GetPixelIndex(), invoked from WritePICONImage in coders/xpm.c.
CVE-2017-11531
CVE-2017-11531 is rejected/not used per the description.
CVE-2017-11540
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...
CVE-2017-11526
The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted file...
CVE-2017-11535
CVE-2017-11535: ImageMagick 7.0.6-1 processes a crafted file in convert, causing a heap-based buffer over-read in WritePSImage() (coders/ps.c). Per unpatched Nessus entry, there is no vendor patch available for this vulnerability.
CVE-2017-11533
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage function in coders/uil.c...
CVE-2017-11533
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage function in coders/uil.c...
CVE-2017-11535
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage function in coders/ps.c...
CVE-2017-11360
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
CVE-2017-11449
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an image received from stdin...
Design/Logic Flaw
The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service large loop and CPU consumption via a malformed JNG file...
