Page 22 of 457 results (0.017 seconds)

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1

CVE-2017-18008 – Ubuntu Security Notice USN-3681-1

https://notcve.org/view.php?id=CVE-2017-18008

01 Jan 2018 — In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. ImageMagick 7.0.7-17 Q16 tiene una fuga de memoria en ReadPWPImage en coders/pwp.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. • http://www.securityfocus.com/bid/102346 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-17934 – Ubuntu Security Notice USN-3681-1

https://notcve.org/view.php?id=CVE-2017-17934

27 Dec 2017 — ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls. ImageMagick 7.0.7-17 Q16 x86_64 tiene filtrados de memoria en coders/msl.c. Esto está relacionado con MSLPopImage y ProcessMSLScript, y se asocia a una mala gestión de llamadas MSLPushImage. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into ope... • http://www.securityfocus.com/bid/102314 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 7.1EPSS: 0%CPEs: 6EXPL: 0

CVE-2017-17914 – Ubuntu Security Notice USN-3681-1

https://notcve.org/view.php?id=CVE-2017-17914

26 Dec 2017 — In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file. Se ha encontrado una vulnerabilidad en ImageMagick 7.0.7-16 Q16 en la función ReadOnePNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (bucle ReadOneMNGImage de gran tamaño) mediante un archivo de imagen mng manipulado. It was discovered ... • https://github.com/ImageMagick/ImageMagick/issues/908 • CWE-834: Excessive Iteration •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-17881 – Ubuntu Security Notice USN-3681-1

https://notcve.org/view.php?id=CVE-2017-17881

24 Dec 2017 — In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadMATImage en coders/mat.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen MAT manipulado. It was discovered that ImageMagick incorrectly handled ce... • https://github.com/ImageMagick/ImageMagick/issues/878 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-17880

https://notcve.org/view.php?id=CVE-2017-17880

24 Dec 2017 — In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check. En ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, existe una sobrelectura de búfer basada en pila en WriteWEBPImage en coders/webp.c. Esto está relacionado con una comprobación WEBP_DECODER_ABI_VERSION. • http://www.securityfocus.com/bid/102317 • CWE-125: Out-of-bounds Read •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-17883

https://notcve.org/view.php?id=CVE-2017-17883

24 Dec 2017 — In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadPGXImage en coders/pgx.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen PGX manipulado. • https://github.com/ImageMagick/ImageMagick/issues/877 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 0

CVE-2017-17879 – Debian Security Advisory 4204-1

https://notcve.org/view.php?id=CVE-2017-17879

24 Dec 2017 — In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error. En ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, existe una sobrelectura de búfer basada en memoria dinámica (heap) en ReadOneMNGImage en coders/png.c. Esto está relacionado con el cálculo de longitud y causado por un error por un paso. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a... • http://www.securityfocus.com/bid/102305 • CWE-125: Out-of-bounds Read •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-17884 – Ubuntu Security Notice USN-3681-1

https://notcve.org/view.php?id=CVE-2017-17884

24 Dec 2017 — In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-16 Q16 en la función WriteOnePNGImage en coders/png.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen PNG manipulado. It was discovered that ImageMagick incorrectly ha... • https://github.com/ImageMagick/ImageMagick/issues/902 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-17885 – Ubuntu Security Notice USN-3681-1

https://notcve.org/view.php?id=CVE-2017-17885

24 Dec 2017 — In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadPICTImage en coders/pict.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen PICT manipulado. It was discovered that ImageMagick incorrectly hand... • https://github.com/ImageMagick/ImageMagick/issues/879 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-17882 – Ubuntu Security Notice USN-3681-1

https://notcve.org/view.php?id=CVE-2017-17882

24 Dec 2017 — In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-12 Q16 en la función ReadXPMImage en coders/xpm.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo de imagen XPM manipulado. It was discovered that ImageMagick incorrectly handled ce... • https://github.com/ImageMagick/ImageMagick/issues/880 • CWE-772: Missing Release of Resource after Effective Lifetime •