The vulnerability of the ReadPSImage function (coders/ps.c) in the console-based graphic editor ImageMagick allows a hacker to cause a waste of computing resources and a denial of service.

The vulnerability of the ReadPSImage function coders/ps.c in the console-based graphic editor ImageMagick is related to resource management errors. Exploiting this vulnerability allows an attacker to unnecessarily consume computing resources and cause service interruptions by using a specially...

SQL Injection Vulnerability in ShopsN v2.0 Frontend OrderController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end OrderController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive informatio...

ImageMagick Denial of Service Vulnerability (CNVD-2017-26585)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in the ReadMPCImage of the coders/mpc.c file in ImageMagick version 7.0.6-8 Q16, which stems from the program failing to...

DEBIAN-CVE-2017-14249

ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file...

FFmpeg libavformat/mov.c File Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/mov.c file in FFmpeg version 3.3.3, which is caused by the program's failure to adequately detect EOF End of File. The vulnerability can b...

FFmpeg libavformat/asfdec_f.c File Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/asfdecf.c file in FFmpeg version 3.3.3, which is caused by the program not adequately detecting EOF End of File. The vulnerability can be...

UBUNTU-CVE-2017-14249

ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file...

DEBIAN-CVE-2017-14223

In libavformat/asfdecf.c in FFmpeg 3.3.3, a DoS in asfbuildsimpleindex due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would...

DEBIAN-CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

ALPINE-CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

ALPINE-CVE-2017-14223

In libavformat/asfdecf.c in FFmpeg 3.3.3, a DoS in asfbuildsimpleindex due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would...

Design/Logic Flaw

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

UBUNTU-CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

Lessons from the Equifax Breach

When we see a car wreck it’s very easy to slow down and gawk. The first thing we think is “Wow, that’s awful,” quickly followed by “Whew… glad that wasn’t me,” and then we drive on. Most of us don’t spend time thinking about how the wreck happened -- we were just glad it wasn’t us. A similar...

ImageMagick coders/xbm.c file denial of service vulnerability

ImageMagick is a set of open source image processing software. The software can read, convert and write images in a variety of formats. A security vulnerability exists in the coders/xbm.c file in ImageMagick, which originates from the program's failure to detect EOF End of File. A remote attacker...

Cisco IOS and Cisco IOS XE Denial of Service Vulnerabilities

Cisco IOS and IOS XE are both operating systems developed by Cisco for its network devices.UDP processing is one of the UDP User Datagram Protocol protocol handlers. A denial of service vulnerability exists in the UDP processing code in Cisco IOS and IOS XE. A remote attacker could exploit this...

ImageMagick coders/ps.c file denial of service vulnerability

ImageMagick is a set of open source image processing software. The software can read, convert and write images in a variety of formats. A security vulnerability exists in the coders/ps.c file in ImageMagick, which originates from the program's failure to adequately detect EOF End of File. An...

FFmpeg libavformat/mxfdec.c File Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/mxfdec.c file in FFmpeg version 3.3.3, which is caused by the program not adequately detecting EOF End of File. A remote attacker can...

ImageMagick coders/psd.c file denial of service vulnerability

ImageMagick is a set of open source image processing software. The software can read, convert and write images in a variety of formats. A security vulnerability exists in the coders/psd.c file in ImageMagick 7.0.6-1, which stems from the program's failure to detect EOF End of File. A remote...

FFmpeg libavformat/nsvdec.c File Resource Management Error Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/nsvdec.c file in FFmpeg version 3.3.3, which is caused by the program's failure to adequately detect EOF End of File. A remote attacker ca...