Lucene search
+L

5 matches found

osv_ubuntu
osv_ubuntu
•added 2017/09/21 5:29 p.m.•19 views

UBUNTU-CVE-2017-14650

A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...

8.1CVSS7.2AI score0.03986EPSS
SaveExploits1References5
Mend
Mend
•added 2017/09/21 5:00 p.m.•6 views

CVE-2017-14650

A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...

9.2CVSS0.03986EPSS
SaveExploits1References6
CVE
CVE
•added 2017/09/21 5:00 p.m.•92 views

CVE-2017-14650

CVE-2017-14650 affects Horde_Image (Im backend) using ImageMagick convert; root cause is missing input validation of the index field in _raw() when building the ImageMagick command. Affected are Horde_Image versions 2.0.0 through 2.5.1; fixed in 2.5.2. The vulnerability is contextual: it is not r...

8.1CVSS8.4AI score0.03986EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2017/09/21 12:00 a.m.•6 views

PT-2017-13611

Name of the Vulnerable Software and Affected Versions Horde Image versions 2.0.0 through 2.5.1 Description A Remote Code Execution issue has been found in the Horde Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. This issue is not exploitable through any...

8.1CVSS0.03986EPSS
SaveExploits1References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/21 12:00 a.m.•7 views

CVE-2017-14650: Improper Input Validation

A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...

8.1CVSS7AI score0.03986EPSS
SaveExploits1References2
Rows per page
Query Builder