1560 matches found
CVE-2017-14249
ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file...
Heap overflow
A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file...
CVE-2017-14224
CVE-2017-14224 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2017-14173
In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...
Denial Of Service (DoS) Through Infinite Loop
ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a txt file to the application through the ReadTXTImage function in coders/txt.c to cause an infinite loop...
ImageMagick 'ReadTXTImage()' Function Integer Overflow Vulnerability
ImageMagick is a set of open source image processing software. The software can read, convert and write images in a variety of formats. An integer overflow vulnerability exists in the 'ReadTXTImage' function in the coders/txt.c file in ImageMagick version 7.0.6-10. An attacker can exploit this...
Integer overflow
In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...
CVE-2017-14173
In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...
CVE-2017-14173
In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...
CVE-2017-14172
CVE-2017-14172 is rejected and not an active vulnerability entry.
CVE-2017-14173
CVE-2017-14173 affects ImageMagick (ImageMagick 7.0.6-10) and specifically the TXT image codec. The vulnerability arises in ReadTXTImage() (coders/txt.c) where an integer overflow can occur on the addition GetQuantumRange(depth)+1 when depth is large, causing an infinite loop when processing a cr...
CVE-2017-14174
In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over...
CVE-2017-14138
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...
CVE-2017-14137
ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...
CVE-2017-14139
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...
Memory corruption
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...
CVE-2017-14138
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...
Memory corruption
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...