Lucene search
K

42 matches found

Tenable Nessus
Tenable Nessus
added 2022/09/09 12:0 a.m.41 views

ImageMagick < 7.0.10-57 Integer Overflow

The remote Windows host has a version of ImageMagick installed that is prior 7.0.10-57. It is, therefore, affected by an integer overflow error in the GetPixelIndex function. An attacker can craft a malicious PDF file that, when processed by ImageMagick, results in undefined behavior or a crash...

5.5CVSS7AI score0.00033EPSS
Exploits0References2
NVD
NVD
added 2022/08/25 8:15 p.m.19 views

CVE-2021-20224

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead t...

5.5CVSS0.00033EPSS
Exploits0References4
OSV
OSV
added 2022/08/25 8:15 p.m.21 views

CVE-2021-20224

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead t...

5.5CVSS6.7AI score
Exploits0References4
Debian CVE
Debian CVE
added 2022/08/25 12:0 a.m.93 views

CVE-2021-20224

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead t...

5.5CVSS5.8AI score0.00033EPSS
Exploits0
CVE
CVE
added 2022/08/25 12:0 a.m.106 views

CVE-2021-20224

CVE-2021-20224 is an ImageMagick vulnerability: an integer overflow in MagickCore/quantum-export.c (ExportIndexQuantum) where GetPixelIndex() can produce values outside the range of an unsigned char when processing crafted PDFs, potentially causing undefined behavior or a crash. The issue is docu...

5.5CVSS6.2AI score0.00033EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2021/03/04 12:0 a.m.7 views

PT-2022-5599 · Unknown +6 · Imagemagick +6

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to an integer overflow in the ExportIndexQuantum function of ImageMagick. This can occur when the function calls GetPixelIndex, resulting in values outside the rang...

8.8CVSS7.4AI score0.88528EPSS
Exploits65References315
Veracode
Veracode
added 2020/12/06 4:1 a.m.23 views

Undefined Behavior

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

3.3CVSS0.9AI score0.00555EPSS
Exploits1References4Affected Software4
NVD
NVD
added 2020/12/04 3:15 p.m.14 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS4.2AI score0.00555EPSS
Exploits1References3
Prion
Prion
added 2020/12/04 3:15 p.m.23 views

Input validation

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS3.5AI score0.00555EPSS
Exploits1References3Affected Software3
OSV
OSV
added 2020/12/04 3:15 p.m.0 views

UBUNTU-CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

3.3CVSS6.7AI score0.00555EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2020/12/04 3:15 p.m.20 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS6.8AI score0.00555EPSS
Exploits1References3
Cvelist
Cvelist
added 2020/12/04 12:0 a.m.17 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

5AI score0.00555EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2020/12/04 12:0 a.m.37 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS5.9AI score0.00555EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2020/11/24 7:54 p.m.43 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS1.6AI score0.00555EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2017/07/25 4:21 p.m.23 views

CVE-2017-11540

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...

6.5CVSS1.9AI score0.00377EPSS
Exploits1References1
CNVD
CNVD
added 2017/07/24 12:0 a.m.1 views

ImageMagick Buffer Overflow Vulnerability (CNVD-2017-18111)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A buffer overflow vulnerability exists in the 'GetPixelIndex' function in ImageMagick version 7.0.6-1. An attacker can...

6.5CVSS7.1AI score0.00377EPSS
Exploits1References1
Prion
Prion
added 2017/07/23 3:29 a.m.12 views

Heap overflow

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...

4.3CVSS6.3AI score0.00377EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2017/07/23 3:29 a.m.12 views

CVE-2017-11540

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...

6.5CVSS7.8AI score0.00377EPSS
Exploits1References2
OSV
OSV
added 2017/07/23 3:29 a.m.26 views

CVE-2017-11540

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...

6.5CVSS7.1AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2017/07/23 3:29 a.m.22 views

CVE-2017-11540

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...

6.5CVSS6.9AI score0.00377EPSS
Exploits1References1
Rows per page
Query Builder