2506 matches found
CVE-2017-14684: Missing Release of Resource after Effective Lifetime
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service memory consumption in ResizeMagickMemory in MagickCore/memory.c via a crafted file...
CVE-2017-14649
CVE-2017-14649 affects GraphicsMagick 1.3.26, where ReadOneJNGImage in coder/png.c does inadequate validation of JNG data, causing an assertion failure in magick/pixel_cache.c and an application crash (DoS). Connected sources do not provide an updated fix or remediation details beyond the initial...
DEBIAN-CVE-2017-14626
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeldecode in coders/sixel.c...
CVE-2017-14626
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeldecode in coders/sixel.c...
Null pointer dereference
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c...
CVE-2017-14624
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c...
CVE-2017-14625
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeloutputcreate in coders/sixel.c...
Null pointer dereference
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeloutputcreate in coders/sixel.c...
CVE-2017-14624
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c...
CVE-2017-14626
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeldecode in coders/sixel.c...
CVE-2017-14624
ImageMagick 7.0.7-0 Q16 is reported to have a NULL pointer dereference in PostscriptDelegateMessage (coders/ps.c), enabling a DoS-like crash scenario (CVE-2017-14624). The description identifies the vulnerable function and location but does not provide information on the patch/fixed version or ex...
CVE-2017-14625
ImageMagick 7.0.7-0 Q16 contains a NULL pointer dereference in sixel_output_create (coders/sixel.c). The CVE is CVE-2017-14625. Connected advisories confirm multiple vendor patches; Debian/DLA-2366-1 notes fixes in imagemagick 6.9.7.4+dfsg-11+deb9u10 (Debian 9) and 6.8.9.9-5+deb8u16 (Debian 8) ac...
CVE-2017-14625
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeloutputcreate in coders/sixel.c...
CVE-2017-14626
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeldecode in coders/sixel.c...
PT-2017-4125
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-3 Description The issue is related to the ReadCAPTIONImage function in the coders/caption.c component, which can lead to a denial of service due to an infinite loop. This can be triggered by a remote attacker using a...
CVE-2017-14649: Reachable Assertion
ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service assertion failure in magick/pixelcache.c, and application crash...
CVE-2017-14626: NULL Pointer Dereference
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeldecode in coders/sixel.c...
CVE-2017-14625: NULL Pointer Dereference
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixeloutputcreate in coders/sixel.c...
CVE-2017-14624: NULL Pointer Dereference
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c...
PT-2017-13621
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-4 Q16 Description A memory leak issue was discovered in the ReadVIPSImage function, located in coders/vips.c. This issue can be exploited by attackers using a crafted file, leading to a denial of service due to memory...