CVE-2016-7515

The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the number of pixels...

CVE-2016-7519

The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-7529

CVE-2016-7529 affects ImageMagick; the vulnerability is in coders/xcf.c, where processing a crafted XCF file can trigger an out-of-bounds read and remote denial of service. The connected F5 advisory confirms the issue among multiple ImageMagick CVEs but does not specify a patch version or workaro...

CVE-2016-7528

CVE-2016-7528 : The ReadVIFFImage function in ImageMagick (coders/viff.c) can be triggered by a crafted VIFF file to cause a denial of service via segmentation fault. The available connected documentation confirms this specific vulnerability detail but does not provide vendor/product versions, ex...

CVE-2016-7529

coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted XCF file...

CVE-2014-9907

CVE-2014-9907 affects ImageMagick’s DDS coder (coders/dds.c). A crafted DDS file can be used by remote attackers to cause a denial of service. The provided documents describe the vulnerability and its DoS impact but do not specify a fixed version or patch; no remediation details are listed here. ...

CVE-2016-7533

CVE-2016-7533 affects ImageMagick via the ReadWPGImage function in coders/wpg.c, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service when processing a crafted WPG file. The initial description confirms the vulnerability class (DoS through crafted input) and t...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. This is caused by heap-based buffer overflow in the CalcMinMax function in coders/mat.c, allowing a attackers to cause an out-of-bounds read and application crash using a .mat file...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The ReadMATImage function in coders/mat.c does not check for an invalid number of frames, allowing remote attackers to cause an application crash using a .mat file...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. This is caused by a buffer overflow in the ReadVIFFImage function in coders/viff.c, allowing remote attackers to cause an application crash through an image file...

CVE-2014-9837

CVE-2014-9837 affects ImageMagick 6.9.0-1 Beta and earlier. The flaw is in coders/pnm.c, exploitable remotely via a crafted PNG file to cause a crash (denial of service). Connected sources confirm the affected component and vector but do not specify a patch version or remediation in the provided ...

ImageMagick Denial of Service Vulnerability (CNVD-2017-05312)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in coders/sun.c in ImageMagick. A remote attacker can cause a denial of service out-of-bounds access via a specially designed...

CVE-2017-7606

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7606

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7606

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

UBUNTU-CVE-2017-7606

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

AMF3 Java implementations Improper Restriction of XML External Entity Reference ('XXE')

A detailed analysis of the reference: https://codewhitesec.blogspot.kr/2017/04/amf.html Some Java implementations of AMF3 deserializers allow the external entity references XXEs from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose...

AMF3 Java implementations deserialization Vulnerability

Details reference: https://codewhitesec.blogspot.kr/2017/04/amf.html Some Java implementations of AMF3 deserializers derive class instances from java. io. Externalizable rather than the AMF3 specification's recommendation of a flash. utils. IExternalizable. A remote attacker with the ability to...

Action Message Format (AMF3) Java implementations are vulnerable to insecure deserialization and XML external entities references

Overview Several Java implementations of AMF3 are vulnerable to insecure deserialization and XML external entities references. Description Several Java implementations of Action Message Format AMF3 are vulnerable to one or more of the following implementation errors:CWE-502: Deserialization of...

ImageMagick 'coders/wpg.c' File Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the coders/wpg.c file in ImageMagick. A remote attacker could exploit this vulnerability t...