1560 matches found
CVE-2017-11449
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an image received from stdin...
CVE-2017-11447
CVE-2017-11447 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-11446
CVE-2017-11446 : In ImageMagick 7.0.6-1, the ReadPESImage routine (coders/pes.c) contains an infinite loop vulnerability when processing crafted PES files, leading to CPU exhaustion of the host. The impact is described as a denial of service via resource exhaustion; no other exploit paths are sta...
CVE-2017-11449
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an image received from stdin...
CVE-2017-11449
CVE-2017-11449 affects ImageMagick. The vulnerability lies in coders/mpc.c in versions before 7.0.6-1, where seekable streams are not enabled and blob sizes cannot be validated. This may allow remote attackers to cause a denial of service (application crash) or potentially other impact via an ima...
DEBIAN-CVE-2017-11352
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...
CVE-2017-11360
CVE-2017-11360 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-11352
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...
CVE-2017-11352
ImageMagick vulnerable component: the RLE coder (coders/rle.c) in builds prior to 7.0.5-10. A crafted RLE image can trigger a crash due to incorrect EOF handling, stemming from an incomplete fix for CVE-2017-9144. The description notes the issue exists before 7.0.5-10 and implies a remediation in...
CVE-2017-11352
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...
CVE-2017-11310
CVE-2017-11310 entry rejected/not used; does not represent an active vulnerability.
CVE-2017-11188
No additional technical details about CVE-2017-11188 are provided in the connected documents. The supplied sources do not specify affected products, versions, or fixes beyond the initial description; monitor for updates.
CVE-2017-11166
The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...
CVE-2017-11166
CVE-2017-11166 is an ImageMagick memory-leak vulnerability: the ReadXWDImage function in coders/xwd.c can exhaust memory when processing a crafted XWD header’s color-map length. Reported for ImageMagick 7.0.5-6, the issue is a memory leak in ReadXWDImage that leads to memory exhaustion, with CVSS...
Double free
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
CVE-2017-11139
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
CVE-2017-11139
GraphicsMagick 1.3.26 contains a double-free vulnerability in ReadOneJNGImage() (coders/png.c), tracked as CVE-2017-11139. Connected advisories indicate multiple distributions published fixes; e.g., Debian/DSA-4321-1 and Fedora advisories include GraphicsMagick updates to 1.3.28+ to address this ...
CVE-2017-11141
Technical details are not provided in the supplied documents for CVE-2017-11141. The description notes a memory leak in ImageMagick ReadMATImage parsing MAT files. No vendor, version, or remediation specifics are included; monitor for updates.
