The vulnerability of the AdaptiveThresholdImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure or expose protected information.

The vulnerability of the AdaptiveThresholdImage function MagickCore/threshold.c in the console-based image editing tool ImageMagick involves reading data beyond the buffer boundaries in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or reveal...

CVE-2019-13297

A heap-based buffer over-read was discovered in ImageMagick in the way it selects an individual threshold for each pixel based on the range of intensity values in its local neighborhood due to a height of zero mishandle error. Applications compiled against ImageMagick libraries that accept...

CVE-2019-13295

A heap-based buffer over-read was discovered in ImageMagick in the way it selects an individual threshold for each pixel based on the range of intensity values in its local neighborhood due to a width of zero mishandle error. Applications compiled against ImageMagick libraries that accept...

DEBIAN-CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

ALPINE-CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

UBUNTU-CVE-2019-13297

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled...

UBUNTU-CVE-2019-13295

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled...

PT-2019-2861 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-50 Q16 Description: The issue is related to a heap-based buffer over-read in the AdaptiveThresholdImage function at MagickCore/threshold.c. This occurs because a height of zero is mishandled. Exploitation of this iss...

PT-2019-2866 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-50 Description: The issue is related to a heap-based buffer over-read in the AdaptiveThresholdImage function, located in MagickCore/threshold.c. This occurs due to improper handling of a zero-width value. Exploitati...

ImageMagick heap buffer overflow vulnerability (CNVD-2019-21666)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio A buffer overflow vulnerability exists in the 'AdaptiveThresholdImage' functi...

ImageMagick heap buffer overflow vulnerability (CNVD-2019-21660)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio A buffer overflow vulnerability exists in the 'AdaptiveThresholdImage' functi...

HPE Intelligent Management Center (IMC) deviceThresholdConfig expression language injection remote code execution vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A deviceThresholdConfig expression language injection remote code execution vulnerability exists in HPE...

eVisitorPass Default Management Credentials Vulnerability

Threshold eVisitorPass is a visitor management system from Threshold Canada. A security vulnerability exists in Threshold eVisitorPass version 1.5.5.2 that stems from the program's use of default administrative credentials. A local attacker could exploit the vulnerability to gain full access to t...

eVisitorPass Elevation of Privilege Vulnerability

Threshold eVisitorPass is a visitor management system from Threshold Canada. A privilege-lifting vulnerability exists in Threshold eVisitorPass version 1.5.5.2. A local attacker could use this vulnerability to open the task manager, terminate processes, or start other processes...

eVisitorPass elevation of privilege vulnerability (CNVD-2019-12476)

Threshold eVisitorPass is a visitor management system from Threshold Canada. A power-up vulnerability exists in Threshold eVisitorPass version 1.5.5.2. A local attacker can exploit the vulnerability by accessing the self-service server and clicking on the full-screen button to close the program a...

eVisitorPass elevation of privilege vulnerability (CNVD-2019-08629)

Threshold eVisitorPass is a visitor management system from Threshold Canada. A power-up vulnerability exists in Threshold eVisitorPass version 1.5.5.2. A local attacker can exploit the vulnerability to launch a command window...

Visitor Kiosk Access Systems Riddled with Bugs

Visitor-management systems protect business against physical threats such as unwanted and unidentified guests. But many of these lobby-based perimeter checkpoints are opening up companies to a bevy of cyber-threats. On Monday, IBM’s penetration testing team, X-Force Red, released a report that...

ProcDump Sysinternals Tool for Linux

ProcDump is a Linux reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux developers to create core dumps of their application based on performance triggers. Requirements Minimum OS: Red Hat Enterprise Linux / CentO...

Protection Domain Has Third-Party Backup Snapshot(s)

Challenge Two different issues are possible: Scenario 1: Cannot Remove Protection Domain When trying to remove a protection domain containing the virtual machines, which are being backed up by Veeam Backup for Nutanix AHV backup appliance, the following error occurs: Specified protection domain h...

Security Bulletin: IBM Cúram Social Program Management when not configured with LDAP or SSO may be vulnerable to denial of service.(CVE-2014-6092).

Summary Default authentication methods in IBM Curam Social Program Management do not allow for a per user account lockout policy, and rather employ a single, system wide policy. For most users of the system, a low lockout threshold is desirable. However, for users used to integrate with another...