Page 3 of 23 results (0.002 seconds)

CVSS: 7.5EPSS: 2%CPEs: 4EXPL: 0

CVE-2016-7800 – Debian Security Advisory 3746-1

https://notcve.org/view.php?id=CVE-2016-7800

26 Dec 2016 — Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow. Desbordamiento de enteros en la función parse8BIM en coders/meta.c en GraphicsMagick 1.3.25 y versiones en anteriores permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un fragmento 8BIM manipulado, que desencadena un desbo... • http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-191: Integer Underflow (Wrap or Wraparound) •

CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0

CVE-2016-7996 – Debian Security Advisory 3746-1

https://notcve.org/view.php?id=CVE-2016-7996

26 Dec 2016 — Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries. Desbordamiento de búfer basado en memoria dinámica en el lector de formato WPG en GraphicsMagick 1.3.25 y versiones anteriores permite a atacantes remotos tener un impacto no especificado a través de un mapa de color con un gran número de entradas. Several vulnerabilities have been discovered in GraphicsMagick, a collection... • http://www.debian.org/security/2016/dsa-3746 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

CVE-2016-7997 – Debian Security Advisory 3746-1

https://notcve.org/view.php?id=CVE-2016-7997

26 Dec 2016 — The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a ReferenceBlob and a NULL pointer. El lector de formato WPG en GraphicsMagick 1.3.25 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y caída) a través de vectores relacionados con un ReferenceBlob y un puntero NULL. Several vulnerabilities have been discovered in GraphicsMagick, a collec... • http://www.debian.org/security/2016/dsa-3746 • CWE-476: NULL Pointer Dereference •