ImageMagick Denial of Service Vulnerability (CNVD-2017-04964)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the coders/ipl.c file in ImageMagick. A remote attacker can exploit this...

ImageMagick 'coders/wpg.c' File Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the coders/wpg.c file in ImageMagick. A remote attacker could exploit this vulnerability t...

CVE-2017-7275

The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service attempted large memory allocation and application crash via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866...

CVE-2017-7275: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service attempted large memory allocation and application crash via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866...

Memory corruption

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

Heap overflow

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

CVE-2016-10144

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...

CVE-2017-5510

CVE-2017-5510 affects ImageMagick: the PSD file handling in coders/psd.c allows remote attackers to trigger an out-of-bounds write via a crafted PSD image. The Connected documents confirm this vulnerability and link it to multiple ImageMagick PSB/PSD-related issues. Impact is described as unspeci...

CVE-2016-10145

CVE-2016-10145 is rejected/not used; not an active vulnerability entry.

CVE-2016-10144

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...

CVE-2016-10144

CVE-2016-10144 affects ImageMagick (coders/ipl.c) where a missing malloc check enables remote attackers to achieve an unspecified impact. The vulnerability is documented with high CVSS potential; Nessus entries indicate some distros may be unpatched (vendor patches not available). No exploit spec...

CVE-2017-5511

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

CVE-2017-5509

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write...

CVE-2017-5511

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

CVE-2016-10145

Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...

CVE-2017-5510

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write...

CVE-2017-5507

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

CVE-2016-10144

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...

CVE-2016-10145

Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks through a buffer overflow and other attacks. This is caused by a flaw in the WritePDBImage function in coders/pdb.c and can be triggered using an image file...