EUVD-2017-5648

Malware in sbrugna...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. An attacker is able to cause a divide-by-zero function coders/webp.c resulting in an application crash and other unexpected behavior...

ImageMagick < 6.9.11-62, 7.0.0 < 7.0.10-62 Divide By Zero

The remote Windows host has a version of ImageMagick installed that is prior to 6.9.11-62 or 7.0.x prior to 7.0.10-62. It is, therefore, affected by following vulnerablities. - A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagic...

CVE-2021-20245

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...

Design/Logic Flaw

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...

CVE-2021-20245

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...

CVE-2021-20245

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...

CVE-2021-20245

ImageMagick vulnerability CVE-2021-20245 affects the webp coder (coders/webp.c). A crafted input file processed by ImageMagick may trigger undefined behavior via division by zero, with availability impact. Public details consistently reference this flaw and its presence across multiple advisories...

CVE-2021-20245

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be triggered due to a heap-based buffer over-read in the IsWEBPImageLossless function of coders/webp.c...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

CVE-2018-9135

CVE-2018-9135 : In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless (coders/webp.c). The connected documents confirm this specific faulty code location and description. The reports do not disclose a fixed patch version or mitigation within the provided mater...

CVE-2018-7470

CVE-2018-7470 affects ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c can be triggered by a crafted WEBP file to cause a denial of service (segmentation fault). Public references describe a network-remote trigger and do not indicate exploitation status or patched versi...

CVE-2018-7470

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...

CVE-2017-17913

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...

CVE-2017-17880

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBPDECODERABIVERSION check...

CVE-2017-17913

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...

CVE-2017-17880

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBPDECODERABIVERSION check...

CVE-2017-17880

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBPDECODERABIVERSION check...