CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-14989 – Debian Security Advisory 4032-1
https://notcve.org/view.php?id=CVE-2017-14989
02 Oct 2017 — A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code. Un uso de memoria previamente liberada en RenderFreetype in MagickCore/annotate.c en ImageMagick 7.0.7-4 Q16 permite que los atacantes provoquen el cierre inesperado de la aplicación mediante un archivo de fuente manipulado, ya que la función FT_Do... • https://github.com/ImageMagick/ImageMagick/issues/781 • CWE-416: Use After Free •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-14739 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14739
26 Sep 2017 — The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors. La función AcquireResampleFilterThreadSet en magick/resample-private.h en ImageMagick 7.0.7-4 no gestiona correctamente el fallo en la asignación de memoria, lo que permite que los atacantes remotos provoq... • https://github.com/ImageMagick/ImageMagick/issues/780 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-14741 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14741
26 Sep 2017 — The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file. La función ReadCAPTIONImage en coders/caption.c en ImageMagick 7.0.7-3 permite que atacantes remotos provoquen una denegación de servicio (bucle infinito) mediante un archivo de fuente manipulado. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked i... • https://github.com/ImageMagick/ImageMagick/issues/771 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 1CVE-2017-14684 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14684
22 Sep 2017 — In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file. Se ha encontrado una vulnerabilidad de filtrado de memoria en ImageMagick 7.0.7-4 Q16 en la función ReadVIPSImage en coders/vips.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (consumo de memoria en ResizeMagickMemory en ... • https://github.com/ImageMagick/ImageMagick/issues/770 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2017-14682 – Debian Security Advisory 4032-1
https://notcve.org/view.php?id=CVE-2017-14682
21 Sep 2017 — GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928. GetNextToken en MagickCore/token.c en ImageMagick 7.0.6 permite que atacantes remotos provoquen una denegación de servicio (desbordamiento de búfer basado en memoria dinámica o heap y cierre inesperado de aplicación) o, probablemente, ... • https://usn.ubuntu.com/3681-1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-14625 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14625
21 Sep 2017 — ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c. ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en la función sixel_output_create en coders/sixel.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or pos... • http://www.securityfocus.com/bid/100941 • CWE-476: NULL Pointer Dereference •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-14624 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14624
21 Sep 2017 — ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c. ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en la función PostscriptDelegateMessage en coders/ps.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service ... • http://www.securityfocus.com/bid/100940 • CWE-476: NULL Pointer Dereference •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-14626 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14626
21 Sep 2017 — ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c. ImageMagick 7.0.7-0 Q16 tiene una vulnerabilidad de desreferencia de puntero NULL en la función sixel_decode en coders/sixel.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute ... • http://www.securityfocus.com/bid/100943 • CWE-476: NULL Pointer Dereference •
CVSS: 8.1EPSS: 0%CPEs: 7EXPL: 0CVE-2017-14607 – Debian Security Advisory 4032-1
https://notcve.org/view.php?id=CVE-2017-14607
20 Sep 2017 — In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash. En ImageMagick 7.0.7-4 Q16 se ha detectado un error de lectura fuera de límites relacionado con la función ReadTIFFImage en coders/tiff.c. Un atacante podría explotar esta vulnerabilidad para divulgar memoria sensible o provocar el cierre inesperado de la aplicación. It was disc... • http://www.securityfocus.com/bid/100944 • CWE-125: Out-of-bounds Read •
CVSS: 7.1EPSS: 0%CPEs: 5EXPL: 0CVE-2017-14531 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14531
18 Sep 2017 — ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c. ImageMagick 7.0.7-0 tiene una vulnerabilidad de agotamiento de memoria en ReadSUNImage en coders/sun.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. • http://www.securityfocus.com/bid/100888 • CWE-770: Allocation of Resources Without Limits or Throttling •