Lucene search
K

22 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/02 12:0 a.m.5 views

The vulnerability of the ReadPSDLayersInternal function in the coders/psd.c component of the console image editing tool ImageMagick, related to a lack of input data validation mechanism, allows attackers to trigger a service failure.

The vulnerability of the ReadPSDLayersInternal function in the ImageMagick console graphics editor’s coders/psd.c file is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially crafted file...

6.5CVSS6.7AI score0.01524EPSS
Exploits0References12Affected Software3
Veracode
Veracode
added 2020/12/06 3:38 a.m.22 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A insecure length validation in the function ReadPSDLayersInternal in coders/psd.c allows attackers to cause a denial of service ReadPSDImage memory exhaustion via a malicious file...

6.5CVSS5.3AI score0.01524EPSS
Exploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2018/01/15 6:49 a.m.26 views

CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

6.5CVSS5AI score0.01691EPSS
Exploits1References1
NVD
NVD
added 2018/01/12 9:29 a.m.25 views

CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

6.5CVSS6.4AI score0.01691EPSS
Exploits1References2
Prion
Prion
added 2018/01/12 9:29 a.m.17 views

Design/Logic Flaw

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

4.3CVSS6.5AI score0.01691EPSS
Exploits1References2Affected Software2
Debian CVE
Debian CVE
added 2018/01/12 9:0 a.m.34 views

CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

6.5CVSS6.6AI score0.01691EPSS
Exploits1
CVE
CVE
added 2018/01/12 9:0 a.m.67 views

CVE-2018-5358

CVE-2018-5358 affects ImageMagick 7.0.7-22 Q16. The issue is a memory leak in the EncodeImageAttributes function (coders/json.c) demonstrated by ReadPSDLayersInternal in coders/psd.c. The provided documents consistently describe this memory leak as the vulnerability, with no additional exploit sp...

6.5CVSS6.9AI score0.01691EPSS
Exploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2018/01/12 9:0 a.m.26 views

CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

6.5CVSS8AI score0.01691EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2018/01/12 12:0 a.m.23 views

CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

6.5CVSS6.8AI score0.01691EPSS
Exploits1References2
OSV
OSV
added 2018/01/12 12:0 a.m.2 views

UBUNTU-CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

6.5CVSS6.8AI score0.01691EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2018/01/05 12:0 a.m.32 views

openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2018:0025-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.4AI score0.19193EPSS
Exploits7References2
BDU FSTEC
BDU FSTEC
added 2017/09/15 12:0 a.m.3 views

The vulnerability of the ReadPSDLayersInternal function (coders/psd.c) in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadPSDLayersInternal function in coders/psd.c of the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause excessive consumption of computing resources and service interruptions...

7.1CVSS6.7AI score0.02249EPSS
Exploits1References11Affected Software3
RedhatCVE
RedhatCVE
added 2017/09/08 8:30 a.m.35 views

CVE-2017-14174

In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over...

7.1CVSS2AI score0.02249EPSS
Exploits1References1
Prion
Prion
added 2017/09/07 6:29 a.m.19 views

Design/Logic Flaw

In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over...

7.1CVSS7.4AI score0.02249EPSS
Exploits1References7Affected Software3
NVD
NVD
added 2017/09/07 6:29 a.m.14 views

CVE-2017-14174

In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over...

7.1CVSS6.6AI score0.02249EPSS
Exploits1References7
CVE
CVE
added 2017/09/07 6:0 a.m.1039 views

CVE-2017-14174

CVE-2017-14174 : ImageMagick 7.0.7-0 Q16 contains a DoS in ReadPSDLayersInternal() due to missing EOF check when parsing PSDs. A crafted PSD that claims a large length but lacks data can trigger a loop over length that consumes massive CPU, as described in the entry. The vulnerability is in coder...

7.1CVSS6.2AI score0.02249EPSS
Exploits1References7Affected Software1
Prion
Prion
added 2017/08/22 6:29 a.m.18 views

Input validation

In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service ReadPSDImage memory exhaustion via a crafted file...

4.3CVSS7.1AI score0.01524EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2017/08/22 6:29 a.m.15 views

CVE-2017-13061

In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service ReadPSDImage memory exhaustion via a crafted file...

6.5CVSS6.4AI score0.01524EPSS
Exploits0References5
OSV
OSV
added 2017/08/22 6:29 a.m.18 views

CVE-2017-13061

In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service ReadPSDImage memory exhaustion via a crafted file...

6.5CVSS6.2AI score
Exploits0References5
CVE
CVE
added 2017/08/22 6:0 a.m.93 views

CVE-2017-13061

CVE-2017-13061 : ImageMagick 7.0.6-5 contains a length-validation vulnerability in ReadPSDLayersInternal (coders/psd.c) that allows a crafted PSD file to trigger a denial of service via memory exhaustion in ReadPSDImage. Root cause is insufficient validation of PSD layer data, leading to memory e...

6.5CVSS6AI score0.01524EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder