2506 matches found
CVE-2016-7529: Out-of-bounds Read
coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted XCF file...
CVE-2016-7519: Out-of-bounds Read
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2014-9907: Improper Input Validation
coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file...
CVE-2016-7515: Out-of-bounds Read
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the number of pixels...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. This is caused by heap-based buffer overflow in the CalcMinMax function in coders/mat.c, allowing a attackers to cause an out-of-bounds read and application crash using a .mat file...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. The ReadMATImage function in coders/mat.c does not check for an invalid number of frames, allowing remote attackers to cause an application crash using a .mat file...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. This is caused by a buffer overflow in the ReadVIFFImage function in coders/viff.c, allowing remote attackers to cause an application crash through an image file...
CVE-2014-9837
CVE-2014-9837 affects ImageMagick 6.9.0-1 Beta and earlier. The flaw is in coders/pnm.c, exploitable remotely via a crafted PNG file to cause a crash (denial of service). Connected sources confirm the affected component and vector but do not specify a patch version or remediation in the provided ...
ImageMagick Denial of Service Vulnerability (CNVD-2017-05312)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in coders/sun.c in ImageMagick. A remote attacker can cause a denial of service out-of-bounds access via a specially designed...
CVE-2014-9837: Out-of-bounds Read
coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service crash via a crafted png file...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
PT-2017-17837
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-4 Description The issue is related to an "outside the range of representable values of type unsigned char" undefined behavior in the coders/rle.c file. This could potentially allow remote attackers to cause a denial o...
UBUNTU-CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
AMF3 Java implementations deserialization Vulnerability
Details reference: https://codewhitesec.blogspot.kr/2017/04/amf.html Some Java implementations of AMF3 deserializers derive class instances from java. io. Externalizable rather than the AMF3 specification's recommendation of a flash. utils. IExternalizable. A remote attacker with the ability to...
AMF3 Java implementations Improper Restriction of XML External Entity Reference ('XXE')
A detailed analysis of the reference: https://codewhitesec.blogspot.kr/2017/04/amf.html Some Java implementations of AMF3 deserializers allow the external entity references XXEs from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose...