ImageMagick Denial of Service Vulnerability (CNVD-2017-04964)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the coders/ipl.c file in ImageMagick. A remote attacker can exploit this...

CVE-2016-10144

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...

Heap overflow

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

Memory corruption

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

CVE-2016-10144

CVE-2016-10144 affects ImageMagick (coders/ipl.c) where a missing malloc check enables remote attackers to achieve an unspecified impact. The vulnerability is documented with high CVSS potential; Nessus entries indicate some distros may be unpatched (vendor patches not available). No exploit spec...

CVE-2016-10144

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...

CVE-2016-10145

Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...

CVE-2017-5510

CVE-2017-5510 affects ImageMagick: the PSD file handling in coders/psd.c allows remote attackers to trigger an out-of-bounds write via a crafted PSD image. The Connected documents confirm this vulnerability and link it to multiple ImageMagick PSB/PSD-related issues. Impact is described as unspeci...

CVE-2017-5511

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

CVE-2016-10145

CVE-2016-10145 is rejected/not used; not an active vulnerability entry.

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks through a buffer overflow and other attacks. This is caused by a flaw in the WritePDBImage function in coders/pdb.c and can be triggered using an image file...

Memory Leak

ImageMagick is vulnerable to memory leaks. It is caused by the ReadPSDLayers function in coders/psd.c, and can be exploited using image files...

CVE-2016-10049

CVE-2016-10049 is a buffer overflow in ImageMagick’s ReadRLEImage (coders/rle.c) prior to 6.9.4-4. A crafted RLE file can cause a denial of service (application crash) or other unspecified impact via remote input. The connected Red Hat advisory for RHEL7 lists this CVE among unpatched vulnerabili...

CVE-2016-10057

CVE-2016-10057 : ImageMagick is affected by a buffer overflow in the WriteGROUP4Image function (coders/tiff.c). A crafted TIFF file can trigger this overflow, allowing remote attackers to cause an application crash (DoS) and potentially other unspecified impacts. The cited vulnerability is in Ima...

CVE-2016-10053

CVE-2016-10053 affects ImageMagick (before 6.9.5-8). The WriteTIFFImage function in coders/tiff.c can be triggered by a crafted TIFF file to cause a denial of service via a divide-by-zero error, crashing the application. Root cause is division by zero in TIFF handling leading to an unhandled exce...

Design/Logic Flaw

The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."...

CVE-2014-9843

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors...

DEBIAN-CVE-2014-9846

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact...

CVE-2014-9843

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors...

CVE-2014-9844

CVE-2014-9844 affects ImageMagick 6.8.9.9, where the ReadRLEImage function in coders/rle.c is vulnerable. A crafted image file can trigger an out-of-bounds read, enabling a remote denial of service. The vulnerability is tied to processing of RLE-encoded data within ImageMagick. The provided conne...