CVE-2020-27750

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char and math division by zero. This would...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

Default credentials

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

UBUNTU-CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

ImageMagick Digital Error Vulnerability (CNVD-2021-10260)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/gem-private.h in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

Imagemagick Studio ImageMagick Security Breach

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick version 6.9.11-40 and version 7.x and...

ImageMagick has an unspecified vulnerability (CNVD-2021-10256)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A security vulnerability exists in ImageMagick.h in versions of ImageMagick prior to 7.0.9-0 in which MagickCore/quantum.h has a range of representable values outside th...

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2020-70257)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

CVE-2020-29599

ImageMagick-identified CVE-2020-29599 is a command-injection flaw in the -authenticate handling for password-protected PDFs, exploitable via coders/pdf.c. Affected releases include ImageMagick 6.9.11-40 and 7.x prior to 7.0.10-40; user-supplied passwords could inject shell commands. Public adviso...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10258)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An input validation error vulnerability exists in ImageMagick, where RestoreMSCWarning in /coders/pdf.c in versions prior to ImageMagick 7.0.9-0 exists outside the range...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

ImageMagick integer overflow vulnerability (CNVD-2021-10261)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An integer overflow vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting ...

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2020-70258)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10263)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An input validation error vulnerability exists in ImageMagick, where MagickCore/statistic.c in versions prior to ImageMagick 7.0.9-0 has a range of representable values...

ImageMagick integer overflow vulnerability (CNVD-2021-10257)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An integer overflow vulnerability exists in MagickCore/string.c in versions of ImageMagick prior to 7.0.8-68. An attacker could exploit this vulnerability to cause an...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10259)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. ImageMagick Input Validation Error Vulnerability, coders/bmp.c in versions of ImageMagick prior to 7.0.9-0, exists outside the range of representable values of type...

ImageMagick exceeds the range of representable values of type 'unsigned long' Vulnerability

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.8-69 that exceeds the range of representable values of type 'unsigned long'. An...