2505 matches found
PT-2018-3692
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-4 Description The issue is related to the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the components coders/dcm.c, coders/pwp.c, coders/cals.c, and coders/pict.c, which do not check the...
Security update for GraphicsMagick (low)
This update for GraphicsMagick fixes the following issues: The following security fixes were fixed: - CVE-2018-10805: Fixed a memory leak in ReadYCBCRImage in coders/ycbcr.c and rgb.c, cmyk.c and gray.c boo1095812 - Fixed invalid memory reads in dcm.c boo1075821c14...
Out-of-bounds
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12600
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12600
ImageMagick 7.0.8-3 Q16 contains ReadDIBImage/WriteDIBImage in coders/dib.c that allow an out-of-bounds write via a crafted image file, leading to memory corruption/DoS. Affected releases and advisories reference CVE-2018-12600. Remediation: update ImageMagick to a patched version as advised by A...
CVE-2018-12600
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12599
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12599
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12600: Out-of-bounds Write
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...
CVE-2018-12599: Out-of-bounds Write
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...
PT-2018-3176
Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-3 Q16 Description The issue is related to the ReadDIBImage and WriteDIBImage functions in the coders/dib.c file of the ImageMagick console graphic editor. It involves a buffer overflow, where writing beyond the memor...
PT-2018-3175
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-3 Q16 Description The issue is related to the functions ReadBMPImage and WriteBMPImage in coders/bmp.c, which allow attackers to cause an out of bounds write via a crafted file. This can potentially enable a remote...
CVE-2018-12600
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...
Design/Logic Flaw
The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references XXEs from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server,...
CVE-2017-3207
The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an R...
CVE-2017-3208
The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references XXEs from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server,...
CVE-2017-3207 WebORB for Java by Midnight Coders, version 5.1.1.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization
The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an R...
CVE-2017-3207
CVE-2017-3207 affects WebORB for Java by Midnight Coders (v5.1.1.0). The AMF3 deserializers derive class instances from java.io.Externalizable instead of the recommended flash.utils.IExternalizable, enabling a remote attacker able to spoof/control an RMI server to send serialized Java objects tha...
CVE-2017-3208
CVE-2017-3208 affects WebORB for Java (Midnight Coders), where the Java AMF3 deserializers can process XML embedded in AMF3 messages and allow XML External Entity (XXE) references. The issue arises from deserialization behavior using or allowing untrusted data, potentially enabling exposure of se...