CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2017-5506 – Ubuntu Security Notice USN-3222-1
https://notcve.org/view.php?id=CVE-2017-5506
17 Feb 2017 — Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file. La vulnerabilidad de liberación doble en magick/profile.c en ImageMagick permite a los atacantes remotos tener un impacto no especificado a través de un archivo manipulado. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could ex... • http://www.debian.org/security/2017/dsa-3799 • CWE-415: Double Free •
CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0CVE-2017-5511 – Ubuntu Security Notice USN-3222-1
https://notcve.org/view.php?id=CVE-2017-5511
17 Feb 2017 — coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow. Coders/psd.c en ImageMagick permite a los atacantes remotos tener un impacto no especificado al aprovechar un cast impropio, lo que desencadena un desbordamiento de búfer basado en memoria dinámica. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into openi... • http://www.debian.org/security/2017/dsa-3799 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2016-10144 – Ubuntu Security Notice USN-3222-1
https://notcve.org/view.php?id=CVE-2016-10144
17 Feb 2017 — coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check. coders/ipl.c en ImageMagick permite a los atacantes remotos tener un impacto inespecífico aprovechando un check perdido de malloc. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execut... • http://www.debian.org/security/2017/dsa-3799 • CWE-284: Improper Access Control •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2016-10146 – Ubuntu Security Notice USN-3222-1
https://notcve.org/view.php?id=CVE-2016-10146
17 Feb 2017 — Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Varias pérdidas de memoria en la leyenda y el código de manejo de etiquetas en ImageMagick permiten a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de vectores no especificados. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using Im... • http://www.debian.org/security/2017/dsa-3799 • CWE-399: Resource Management Errors •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-9773
https://notcve.org/view.php?id=CVE-2016-9773
16 Feb 2017 — Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556. Desbordamiento de búfer basado en memoria dinámica en la función IsPixelGray en MagickCore/pixel-accessor.h en ImageMagick 7.0.3.8 permite a atacantes remotos provocar una denegación de servicio (lectura de memoria din... • http://www.openwall.com/lists/oss-security/2016/12/01/4 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-8678
https://notcve.org/view.php?id=CVE-2016-8678
15 Feb 2017 — The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted file. NOTE: the vendor says "This is a Q64 issue and we do not support Q64." La función IsPixelMonochrome en MagickCore/pixel-accessor.h en ImageMagick 7.0.3.0 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites y caída) a través de un archivo manipulado. NOTA: el proveedor dice que "Este e... • http://www.openwall.com/lists/oss-security/2016/10/16/2 • CWE-125: Out-of-bounds Read •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 2CVE-2016-8866
https://notcve.org/view.php?id=CVE-2016-8866
15 Feb 2017 — The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862. La función AcquireMagickMemory en MagickCore/memory.c en ImageMagick 7.0.3.3 en versiones anteriores a 7.0.3.8 permite a atacantes remotos tener un impacto no especificado a través de una imagen manipulada, lo que desencad... • http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00085.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 1%CPEs: 29EXPL: 0CVE-2016-9298 – Gentoo Linux Security Advisory 201702-09
https://notcve.org/view.php?id=CVE-2016-9298
27 Jan 2017 — Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service (crash) via a crafted image. Desbordamiento de búfer basado en memoria dinámica en la función WaveletDenoiseImage en MagickCore/fx.c en ImageMagick en versiones anteriores a 6.9.6-4 y 7.x en versiones anteriores a 7.0.3-6 permite a atacantes remotos provocar una denegación de servicio (caída) a través de una imagen manipulada. Multiple... • http://www.openwall.com/lists/oss-security/2016/11/13/1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2016-6823
https://notcve.org/view.php?id=CVE-2016-6823
18 Jan 2017 — Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write. Desbordamiento de entero en el codificador BMP en ImageMagick en versiones anteriores a 7.0.2-10 permite a atacantes remotos provocar una denegación de servicio (caída) a través de valores de longitud y anchura manipulados, lo que desencadena una escritura fuera de límites. • http://www.openwall.com/lists/oss-security/2016/09/26/3 • CWE-190: Integer Overflow or Wraparound •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2016-7101
https://notcve.org/view.php?id=CVE-2016-7101
18 Jan 2017 — The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file. El codificador SGI en ImageMagick en versiones anteriores a 7.0.2-10 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) a través de un valor de fila grande en un archivo sgi. • http://www.openwall.com/lists/oss-security/2016/09/26/8 • CWE-125: Out-of-bounds Read •