1560 matches found
CVE-2018-14435
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...
CVE-2018-14437
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c...
CVE-2018-14436
ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c...
CVE-2018-14434
ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c...
UBUNTU-CVE-2018-14437
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c...
Security update for GraphicsMagick (low)
This update for GraphicsMagick fixes the following issues: The following security fixes were fixed: - CVE-2018-10805: Fixed a memory leak in ReadYCBCRImage in coders/ycbcr.c and rgb.c, cmyk.c and gray.c boo1095812 - Fixed invalid memory reads in dcm.c boo1075821c14...
Out-of-bounds
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12600
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12600
ImageMagick 7.0.8-3 Q16 contains ReadDIBImage/WriteDIBImage in coders/dib.c that allow an out-of-bounds write via a crafted image file, leading to memory corruption/DoS. Affected releases and advisories reference CVE-2018-12600. Remediation: update ImageMagick to a patched version as advised by A...
CVE-2018-12600
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12599
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2017-3207
The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an R...
CVE-2017-3208
The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references XXEs from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server,...
Design/Logic Flaw
The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references XXEs from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server,...
CVE-2017-3208
CVE-2017-3208 affects WebORB for Java (Midnight Coders), where the Java AMF3 deserializers can process XML embedded in AMF3 messages and allow XML External Entity (XXE) references. The issue arises from deserialization behavior using or allowing untrusted data, potentially enabling exposure of se...
CVE-2017-3207 WebORB for Java by Midnight Coders, version 5.1.1.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization
The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an R...
CVE-2017-3207
CVE-2017-3207 affects WebORB for Java by Midnight Coders (v5.1.1.0). The AMF3 deserializers derive class instances from java.io.Externalizable instead of the recommended flash.utils.IExternalizable, enabling a remote attacker able to spoof/control an RMI server to send serialized Java objects tha...
CVE-2018-11656
CVE-2018-11656 affects ImageMagick 7.0.7-20 (Q16 x86_64) and reports a memory-leak vulnerability in ReadDCMImage (coders/dcm.c) that can cause a denial of service when processing a crafted DCM image. The description does not specify a concrete exploit or impact beyond DoS, and no remediation or p...