Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2017/10/10 12:51 p.m.33 views

CVE-2017-14989

A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FTDoneGlyph function from FreeType 2 is called at an incorrect place in the ImageMagick code...

6.5CVSS5AI score0.0145EPSS
Exploits0References1
Veracode
Veracode
added 2017/10/04 1:25 a.m.23 views

Use-After-Free

ImageMagick is susceptible to a use-after-free vulnerability. The vulnerability exists in the RenderFreetype function of magick/annotate.c. Calling the FTDoneGlyph method at a wrong place in the code allows the attacker to trigger the attack by sending a malicious font file...

6.5CVSS7.6AI score0.0145EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2017/10/03 1:29 a.m.17 views

CVE-2017-14989

A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FTDoneGlyph function from FreeType 2 is called at an incorrect place in the ImageMagick code...

6.5CVSS7.3AI score0.0145EPSS
Exploits0References4
OSV
OSV
added 2017/10/03 1:29 a.m.26 views

CVE-2017-14989

A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FTDoneGlyph function from FreeType 2 is called at an incorrect place in the ImageMagick code...

6.5CVSS6.4AI score
Exploits0References4
Prion
Prion
added 2017/10/03 1:29 a.m.18 views

Design/Logic Flaw

A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FTDoneGlyph function from FreeType 2 is called at an incorrect place in the ImageMagick code...

4.3CVSS6.9AI score0.0145EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2017/10/02 5:0 a.m.36 views

CVE-2017-14989

A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FTDoneGlyph function from FreeType 2 is called at an incorrect place in the ImageMagick code...

6.5CVSS7.2AI score0.0145EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2017/10/02 12:0 a.m.25 views

CVE-2017-14989

A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FTDoneGlyph function from FreeType 2 is called at an incorrect place in the ImageMagick code...

6.5CVSS6.8AI score0.0145EPSS
Exploits0References2
Rows per page
Query Builder