Lucene search
+L

146 matches found

CNVD
CNVD
•added 2017/12/25 12:00 a.m.•23 views

ImageMagick heap buffer overflow vulnerability (CNVD-2018-00092)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A heap buffer overflow vulnerability exists in ReadOneMNGImage in coders/png.c in ImageMagick version 7.0.7-16 Q16 x8664 2017-12-21. An attacker can exploit this...

8.8CVSS7.2AI score0.02885EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/12/24 4:00 a.m.•45 views

CVE-2017-17887

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage...

6.8AI score0.01308EPSS
SaveExploits0References2
Mend
Mend
•added 2017/12/24 4:00 a.m.•1 views

CVE-2017-17879

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error...

8.8CVSS0.02885EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2017/12/24 4:00 a.m.•55 views

CVE-2017-17879

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error...

8.8CVSS7.5AI score0.02885EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2017/12/24 4:00 a.m.•71 views

CVE-2017-17887

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage...

6.5CVSS6.9AI score0.01308EPSS
SaveExploits0
CVE
CVE
•added 2017/12/24 4:00 a.m.•116 views

CVE-2017-17887

CVE-2017-17887 affects ImageMagick 7.0.7-16 Q16. A memory leak in GetImagePixelCache (magick/cache.c) can be triggered by processing a crafted MNG image via ReadOneMNGImage, potentially leading to denial of service. No remediation or patch details are provided in the supplied documents.

6.5CVSS6.6AI score0.01308EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2017/12/24 12:00 a.m.•4 views

PT-2017-15066

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-16 Q16 x86 64 Description The issue is related to a heap-based buffer over-read in the ReadOneMNGImage function, specifically in the coders/png.c file. This is caused by an off-by-one error related to length...

9.8CVSS0.19193EPSS
SaveExploits17References236
RedhatCVE
RedhatCVE
•added 2017/12/12 10:21 a.m.•26 views

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

6.5CVSS3.9AI score0.01609EPSS
SaveExploits1References1
OSV
OSV
•added 2017/12/11 2:29 a.m.•27 views

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

6.5CVSS6.6AI score
SaveExploits0References5
OSV
OSV
•added 2017/12/11 2:29 a.m.•6 views

DEBIAN-CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

6.5CVSS7AI score0.01609EPSS
SaveExploits1References1
Mend
Mend
•added 2017/12/11 2:00 a.m.•2 views

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

7.1CVSS0.01609EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2017/12/11 2:00 a.m.•48 views

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

6.5CVSS6.1AI score0.01609EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/11 12:00 a.m.•5 views

CVE-2017-17504: Out-of-bounds Read

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

6.5CVSS6.6AI score0.01609EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2017/12/10 12:00 a.m.•29 views

CVE-2017-17504

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

6.5CVSS6.9AI score0.01609EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/12/10 12:00 a.m.•1 views

PT-2017-14815

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.7-12 Description The issue is related to a heap-based buffer over-read in the coders/png.c file, specifically in the Magick png read raw profile function, which can be triggered by a crafted file. This is also...

9.8CVSS0.19193EPSS
SaveExploits25References235
BDU FSTEC
BDU FSTEC
•added 2017/11/03 12:00 a.m.•16 views

The vulnerability of the ReadOneMNGImage function (coders/png.c) in the ImageMagick console-based graphics editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ReadOneMNGImage function coders/png.c in the ImageMagick console-based graphics editor is related to pointer aliasing errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.8CVSS6.8AI score0.02037EPSS
SaveExploits0References10Affected Software3
RedhatCVE
RedhatCVE
•added 2017/10/10 2:49 p.m.•43 views

CVE-2017-15017

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...

8.8CVSS2.8AI score0.02037EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/10/09 12:00 a.m.•15 views

ImageMagick coders/png.c file null pointer dereference vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in ReadOneMNGImage in the coders/png.c file in ImageMagick version 7.0.7-0 Q16. A remo...

8.8CVSS8.8AI score0.02037EPSS
SaveExploits0References1
OSV
OSV
•added 2017/10/05 1:29 a.m.•5 views

DEBIAN-CVE-2017-15017

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...

8.8CVSS6.9AI score0.02037EPSS
SaveExploits0References1
NVD
NVD
•added 2017/10/05 1:29 a.m.•20 views

CVE-2017-15017

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...

8.8CVSS7.3AI score0.02037EPSS
SaveExploits0References4
Rows per page
Query Builder