Page 3 of 35 results (0.010 seconds)

CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0

CVE-2016-7996 – Debian Security Advisory 3746-1

https://notcve.org/view.php?id=CVE-2016-7996

26 Dec 2016 — Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries. Desbordamiento de búfer basado en memoria dinámica en el lector de formato WPG en GraphicsMagick 1.3.25 y versiones anteriores permite a atacantes remotos tener un impacto no especificado a través de un mapa de color con un gran número de entradas. Several vulnerabilities have been discovered in GraphicsMagick, a collection... • http://www.debian.org/security/2016/dsa-3746 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

CVE-2016-7997 – Debian Security Advisory 3746-1

https://notcve.org/view.php?id=CVE-2016-7997

26 Dec 2016 — The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a ReferenceBlob and a NULL pointer. El lector de formato WPG en GraphicsMagick 1.3.25 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y caída) a través de vectores relacionados con un ReferenceBlob y un puntero NULL. Several vulnerabilities have been discovered in GraphicsMagick, a collec... • http://www.debian.org/security/2016/dsa-3746 • CWE-476: NULL Pointer Dereference •

CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2015-8808 – Debian Security Advisory 3746-1

https://notcve.org/view.php?id=CVE-2015-8808

13 Jul 2016 — The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file. La función DecodeImage en coders/gif.c en GraphicsMagick 1.3.18 permite a atacantes remotos provocar una denegación de servicio (acceso a memoria no inicializada) a través de un archivo GIF manipulado. Several vulnerabilities have been discovered in GraphicsMagick, a collection of image processing tool, which can cause denial of service ... • http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177834.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-5240 – ImageMagick: SVG converting issue resulting in DoS

https://notcve.org/view.php?id=CVE-2016-5240

17 Jun 2016 — The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a circularly defined SVG file. La función DrawDashPolygon en magick/render.c en GraphicsMagick en versiones anteriores a 1.3.24 y el SVG renderer en ImageMagick permiten a atacantes remotos provocar una denegación de servicio (bucle infinito) convirtiendo un archivo SVG definido circularmente. ImageMagick is an i... • http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=ddc999ec896c • CWE-20: Improper Input Validation CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 10.0EPSS: 56%CPEs: 24EXPL: 0

CVE-2016-5118 – ImageMagick: Remote code execution via filename

https://notcve.org/view.php?id=CVE-2016-5118

30 May 2016 — The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename. La función OpenBlob en blob.c en GraphicsMagick en versiones anteriores a 1.3.24 y ImageMagick permite a atacantes remotos ejecutar código arbitrario a través del caractér | (tubería) en el inicio del nombre de archivo. It was discovered that ImageMagick did not properly sanitize certain input before using it to invoke processe... • http://git.imagemagick.org/repos/ImageMagick/commit/40639d173aa8c76b850d625c630b711fee4dcfb8 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 2%CPEs: 44EXPL: 2

CVE-2013-4589 – Gentoo Linux Security Advisory 201311-10

https://notcve.org/view.php?id=CVE-2013-4589

19 Nov 2013 — The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image. La función ExportAlphaQuantumType en export.c de GraphicsMagick anterior a la versión 1.3.18 podría permitir a atacantes remotos provocar una denegación de servicio (caída) a través de vectores relacionados con la exportación de alpha de una imagen RGBA de 8-bit. Multiple vulnerabilities have been ... • http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120008.html •

CVSS: 7.8EPSS: 0%CPEs: 27EXPL: 0

CVE-2008-6621

https://notcve.org/view.php?id=CVE-2008-6621

06 Apr 2009 — Unspecified vulnerability in GraphicsMagick before 1.2.3 allows remote attackers to cause a denial of service (crash) via unspecified vectors in DPX images. NOTE: some of these details are obtained from third party information. Vulnerabilidad no especificada en la herramienta de procesamiento de imágenes GraphicsMagick v1.2.3 que permite a usuarios remotos causar una denegación de servicio (caída de la aplicación) a través de vectores de ataque no especificados en las imagenes DPX. NOTA: algunos de estos de... • http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/dpx.c •

CVSS: 9.3EPSS: 3%CPEs: 24EXPL: 0

CVE-2008-6070

https://notcve.org/view.php?id=CVE-2008-6070

06 Feb 2009 — Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770. NOTE: some of these details are obtained from third party information. Múltiples desbordamientos inferiores de búfer basados en montículo en la función ReadPALMImage en coders/palm.c de GraphicsMagick before v1.2.3, permite a ata... • http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/palm.c • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 10.0EPSS: 7%CPEs: 20EXPL: 0

CVE-2008-6071

https://notcve.org/view.php?id=CVE-2008-6071

06 Feb 2009 — Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PICT image. NOTE: some of these details are obtained from third party information. Desbordamiento de búfer basado en montículo en la función DecodeImage de coders/pict.c de GraphicsMagick anterior a v1.1.14 y v1.2.x anterior a v1.2.3; permite a atacantes remotos provocar u... • http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/pict.c • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 1%CPEs: 20EXPL: 0

CVE-2008-6072

https://notcve.org/view.php?id=CVE-2008-6072

06 Feb 2009 — Multiple unspecified vulnerabilities in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allow remote attackers to cause a denial of service (crash) via unspecified vectors in (1) XCF and (2) CINEON images. Múltiples vulnerabilidades no especificadas en GraphicsMagick anterior a v1.1.14, y v1.2.x anterior a 1v.2.3, permite a atacantes remotos provocar una denegación de servicio (caída) a través de vectores no especificados en (1) XCF y (2) imágenes CINEON. • http://cvs.graphicsmagick.org/cgi-bin/cvsweb.cgi/GraphicsMagick/coders/cineon.c •