Lucene search
+L

8 matches found

NVD
NVD
•added 2020/12/08 10:15 p.m.•60 views

CVE-2020-27754

In IntensityCompare of /magick/quantize.c, there are calls to PixelPacketIntensity which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity function, which forces the pixel...

4.3CVSS4.2AI score0.01138EPSS
SaveExploits1References3
Prion
Prion
•added 2020/12/08 10:15 p.m.•34 views

Design/Logic Flaw

In IntensityCompare of /magick/quantize.c, there are calls to PixelPacketIntensity which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity function, which forces the pixel...

4.3CVSS3.5AI score0.01138EPSS
SaveExploits1References3Affected Software2
UbuntuCve
UbuntuCve
•added 2020/12/08 10:15 p.m.•31 views

CVE-2020-27754

In IntensityCompare of /magick/quantize.c, there are calls to PixelPacketIntensity which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity function, which forces the pixel...

4.3CVSS6.9AI score0.01138EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2020/12/08 12:00 a.m.•40 views

CVE-2020-27754

In IntensityCompare of /magick/quantize.c, there are calls to PixelPacketIntensity which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity function, which forces the pixel...

5AI score0.01138EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2020/12/08 12:00 a.m.•20 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

ImageMagick is a suite of open source image processing software. The software can read, convert or write images in a variety of formats. ImageMagick suffers from a security vulnerability, which stems from IntensityCompare of /magick/quantize.c, where a call to PixelPacketIntensity returns an...

4.3CVSS6.8AI score0.01138EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/08 12:00 a.m.•2 views

CVE-2020-27754: Integer Overflow or Wraparound

In IntensityCompare of /magick/quantize.c, there are calls to PixelPacketIntensity which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity function, which forces the pixel...

4.3CVSS5.5AI score0.01138EPSS
SaveExploits1References2
Veracode
Veracode
•added 2020/12/06 4:00 a.m.•35 views

Value Overflow

ImageMagick is vulnerable to value overflow. An attacker can enter a craftd input file to PixelPacketIntensity which could return overflowed values...

3.3CVSS3.7AI score0.01138EPSS
SaveExploits1References4Affected Software4
RedhatCVE
RedhatCVE
•added 2020/11/24 7:24 p.m.•37 views

CVE-2020-27754

In IntensityCompare of /magick/quantize.c, there are calls to PixelPacketIntensity which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity function, which forces the pixel...

4.3CVSS3.7AI score0.01138EPSS
SaveExploits1References3
Rows per page
Query Builder