CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2017-14533 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14533
18 Sep 2017 — ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c. ImageMagick 7.0.6-6 tiene una vulnerabilidad de fuga de memoria en ReadMATImage en coders/mat.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. • http://www.securityfocus.com/bid/100885 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2017-14532 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14532
18 Sep 2017 — ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c. ImageMagick 7.0.7-0 tiene una vulnerabilidad de desreferencia de puntero NULL en TIFFIgnoreTags en coders/tiff.c. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invokin... • http://www.securityfocus.com/bid/100883 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2017-14528 – Ubuntu Security Notice USN-4988-1
https://notcve.org/view.php?id=CVE-2017-14528
18 Sep 2017 — The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file. La función TIFFSetProfiles en coders/tiff.c en ImageMagick 7.0.6 tiene unas expectativas incorrectas de si los valores de retorno de LibTIFF TIFFGetField han pasado por un... • http://bugzilla.maptools.org/show_bug.cgi?id=2730 • CWE-416: Use After Free •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-14505 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14505
17 Sep 2017 — DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input. DrawGetStrokeDashArray en wand/drawing-wand.c en ImageMagick 7.0.7-1 no gestiona correctamente algunos arrays NULL, lo que permite a atacantes provocar denegaciones de servicio (desreferencia de puntero NULL y cierr... • http://www.securityfocus.com/bid/100882 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2017-14400 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14400
12 Sep 2017 — In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which allows remote attackers to cause a denial of service (NULL pointer dereference in the function GetVirtualPixels in MagickCore/cache.c) via a crafted file. En ImageMagick 7.0.7-1 Q16, la función PersistPixelCache en magick/cache.c no gestiona correctamente el nexo de caché de píxeles, lo que permite que atacantes remotos provoquen una denegación de servicio (desreferencia de puntero NULL en la... • http://www.securityfocus.com/bid/100865 • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1CVE-2017-14343 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14343
12 Sep 2017 — ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file. ImageMagick 7.0.6-6 cuenta con una vulnerabilidad de fuga de memoria en ReadXCFImage en coders/xcf.c mediante un archivo de imagen xcf manipulado. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or p... • https://github.com/ImageMagick/ImageMagick/issues/649 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 7.1EPSS: 0%CPEs: 7EXPL: 1CVE-2017-14341 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14341
12 Sep 2017 — ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file. ImageMagick 7.0.6-6 cuenta con una gran vulnerabilidad de bucle en ReadWPGImage en coders/wpg.c, provocando el agotamiento de la CPU mediante un archivo de imagen wpg manipulado. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attack... • https://github.com/ImageMagick/ImageMagick/commit/7d63315a64267c565d1f34b9cb523a14616fed24 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 1CVE-2017-14342 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14342
12 Sep 2017 — ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file. ImageMagick 7.0.6-6 cuenta con una vulnerabilidad de agotamiento de memoria en ReadWPGImage en coders/wpg.c mediante un archivo de imagen wpg manipulado. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of... • https://github.com/ImageMagick/ImageMagick/issues/650 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2017-14324
https://notcve.org/view.php?id=CVE-2017-14324
12 Sep 2017 — In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file. Se ha encontrado una vulnerabilidad de fuga de memoria en ImageMagick 7.0.7-1 Q16 en la función ReadMPCImage en coders/mpc.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio mediante un archivo manipulado. • http://www.securityfocus.com/bid/100863 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 7.1EPSS: 0%CPEs: 5EXPL: 1CVE-2017-14325 – Ubuntu Security Notice USN-3681-1
https://notcve.org/view.php?id=CVE-2017-14325
12 Sep 2017 — In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file. Se ha encontrado una vulnerabilidad de fuga de memoria en ImageMagick 7.0.7-1 Q16 en la función PersistPixelCache en magick/cache.c. Esta vulnerabilidad permite que los atacantes provoquen una denegación de servicio (consumo de memoria en ReadMPCImage en coders/mpc.c)... • http://www.securityfocus.com/bid/100874 • CWE-772: Missing Release of Resource after Effective Lifetime •