CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-15218 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-15218
10 Oct 2017 — ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c. ImageMagick 7.0.7-2 tiene una fuga de memoria en ReadOneJNGImage en coders/png.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. • http://www.securityfocus.com/bid/101233 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-15217 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-15217
10 Oct 2017 — ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c. ImageMagick 7.0.7-2 tiene una fuga de memoria en ReadSGIImage en coders/sgi.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. • http://www.securityfocus.com/bid/101231 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-15033 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-15033
05 Oct 2017 — ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c. ImageMagick 7.0.7-2 tiene una vulnerabilidad de fuga de memoria en ReadYUVImage in coders/yuv.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. • https://github.com/ImageMagick/ImageMagick/commit/ef8f40689ac452398026c07da41656a7c87e4683 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-15032 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-15032
05 Oct 2017 — ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. ImageMagick 7.0.7-2 tiene una vulnerabilidad de fuga de memoria en ReadYCBCRImage en coders/ycbcr.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the progra... • https://github.com/ImageMagick/ImageMagick/commit/241988ca28139ad970c1d9717c419f41e360ddb0 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-15016 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-15016
04 Oct 2017 — ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c. ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en ReadEnhMetaFile en coders/emf.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileg... • https://github.com/ImageMagick/ImageMagick/issues/725 • CWE-476: NULL Pointer Dereference •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-15017 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-15017
04 Oct 2017 — ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c. ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en ReadOneMNGImag en coders/png.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privilege... • https://github.com/ImageMagick/ImageMagick/issues/723 • CWE-476: NULL Pointer Dereference •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-15015 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-15015
04 Oct 2017 — ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c. ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en PDFDelegatesMessage en coders/pdf.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the p... • https://github.com/ImageMagick/ImageMagick/issues/724 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-14989 – Debian Security Advisory 4032-1
https://notcve.org/view.php?id=CVE-2017-14989
02 Oct 2017 — A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code. Un uso de memoria previamente liberada en RenderFreetype in MagickCore/annotate.c en ImageMagick 7.0.7-4 Q16 permite que los atacantes provoquen el cierre inesperado de la aplicación mediante un archivo de fuente manipulado, ya que la función FT_Do... • https://github.com/ImageMagick/ImageMagick/issues/781 • CWE-416: Use After Free •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-14739 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14739
26 Sep 2017 — The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors. La función AcquireResampleFilterThreadSet en magick/resample-private.h en ImageMagick 7.0.7-4 no gestiona correctamente el fallo en la asignación de memoria, lo que permite que los atacantes remotos provoq... • https://github.com/ImageMagick/ImageMagick/issues/780 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-14741 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14741
26 Sep 2017 — The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file. La función ReadCAPTIONImage en coders/caption.c en ImageMagick 7.0.7-3 permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante un archivo de fuente manipulado. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked i... • https://github.com/ImageMagick/ImageMagick/issues/771 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •