CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2018-16642 – ImageMagick: out-of-bounds write in InsertRow function in coders/cut.c
https://notcve.org/view.php?id=CVE-2018-16642
06 Sep 2018 — The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write. La función InsertRow en coders/cut.c en ImageMagick 7.0.7-37 permite que atacantes remotos provoquen una denegación de servicio (DoS) mediante un archivo de imagen manipulado debido a una escritura fuera de límites. Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, this update... • https://github.com/ImageMagick/ImageMagick/commit/cc4ac341f29fa368da6ef01c207deaf8c61f6a2e • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-16328 – ImageMagick: NULL pointer dereference in CheckEventLogging function in MagickCore/log.c
https://notcve.org/view.php?id=CVE-2018-16328
01 Sep 2018 — In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c. En ImageMagick en versiones anteriores a la 7.0.8-8, existe una desreferencia de puntero NULL en la función CheckEventLogging en MagickCore/log.c. ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. Issues addressed include buffer overflow, denial of service, double free, information leakage, null pointer, out of bou... • https://github.com/ImageMagick/ImageMagick/issues/1224 • CWE-476: NULL Pointer Dereference •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-16329
https://notcve.org/view.php?id=CVE-2018-16329
01 Sep 2018 — In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c. En ImageMagick en versiones anteriores a la 7.0.8-8, existe una desreferencia de puntero NULL en la función GetMagickProperty en MagickCore/property.c. • https://github.com/ImageMagick/ImageMagick/issues/1225 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 85%CPEs: 7EXPL: 3CVE-2018-16323 – ImageMagick - Memory Leak
https://notcve.org/view.php?id=CVE-2018-16323
01 Sep 2018 — ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data. ReadXBMImage en coders/xbm.c en ImageMagick en versiones anteriores a la 7.0.8-9 deja los datos sin inicializar al procesar un archivo XBM que tiene un valor de pixel negativo. Si el código afectado se em... • https://packetstorm.news/files/id/150402 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1CVE-2018-11655 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2018-11655
01 Jun 2018 — In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of service via a crafted CALS image file. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-20 Q16 x86_64 en la función GetImagePixelCache en MagickCore/cache.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen CALS manipulado. It was discovered... • https://github.com/ImageMagick/ImageMagick/issues/930 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1CVE-2018-11656 – ImageMagick: memory leak in ReadDCMImage function in coders/dcm.c
https://notcve.org/view.php?id=CVE-2018-11656
01 Jun 2018 — In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-20 Q16 en la función ReadDCMImage en coders/dcm.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen DCM manipulado. It was discovered that ImageMagick incorrectly han... • https://github.com/ImageMagick/ImageMagick/issues/931 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-11624 – openSUSE Security Advisory - openSUSE-SU-2018:2123-1
https://notcve.org/view.php?id=CVE-2018-11624
31 May 2018 — In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file. En ImageMagick 7.0.7-36 Q16, la función ReadMATImage en coders/mat.c permite que los atacantes provoquen un uso de memoria previamente liberada mediante un archivo manipulado. An update that solves 5 vulnerabilities and has two fixes is now available. This update for ImageMagick fixes the following issues. • https://github.com/ImageMagick/ImageMagick/issues/1149 • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 1CVE-2018-11625 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2018-11625
31 May 2018 — In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file. En ImageMagick 7.0.7-37 Q16, SetGrayscaleImage en el archivo quantize.c permite que los atacantes provoquen una sobrelectura de búfer basada en memoria dinámica (heap) mediante un archivo manipulado. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a spec... • https://github.com/ImageMagick/ImageMagick/issues/1156 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2018-11251 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2018-11251
18 May 2018 — In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service (application crash in SetGrayscaleImage in MagickCore/quantize.c) via a crafted SUN image file. Hay una sobrelectura de búfer basada en memoria dinámica (heap) en ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, en ReadSUNImage en coders/sun.c que permite que atacantes provoquen una denegación de servicio (cierre inesperado de la aplicación en ... • https://github.com/ImageMagick/ImageMagick/issues/956 • CWE-125: Out-of-bounds Read •
CVSS: 7.1EPSS: 0%CPEs: 6EXPL: 0CVE-2017-18271 – ImageMagick: infinite loop in ReadMIFFImage function in coders/miff.c
https://notcve.org/view.php?id=CVE-2017-18271
18 May 2018 — In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted MIFF image file. Se ha encontrado una vulnerabilidad de bucle infinito en ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22 en la función ReadMIFFImage en coders/miff.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (agotamiento de CPU) mediante un archivo de ima... • https://github.com/ImageMagick/ImageMagick/issues/911 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •