CVE-2017-11539
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c.
- Обновитесь до 8:6.9.7.4+dfsg-15
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости imagemagick · Страница 28
За последние 30 дней в imagemagick опубликовано уязвимостей: 65; в каталоге KEV: 0.
Уязвимостей: 813
CVE-2017-11537
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.
- Обновитесь до 8:6.9.7.4+dfsg-13
Опубликовано ОбновленоCVE-2017-11536
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image() function in coders/jp2.c.
- Обновитесь до 8:6.9.7.4+dfsg-13
Опубликовано ОбновленоCVE-2017-11535
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c.
- Обновитесь до 8:6.9.7.4+dfsg-13
Опубликовано ОбновленоCVE-2017-11534
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c.
- Обновитесь до 8:6.9.7.4+dfsg-13
Опубликовано ОбновленоCVE-2017-11533
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.
- Обновитесь до 8:6.9.7.4+dfsg-13
Опубликовано ОбновленоCVE-2017-11532
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c.
- Обновитесь до 8:6.9.7.4+dfsg-13
Опубликовано ОбновленоCVE-2017-11531
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c.
- Обновитесь до 8:6.9.7.4+dfsg-13
Опубликовано ОбновленоCVE-2017-11530
The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11529
The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11528
The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11527
The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11526
The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11525
The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11524
The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11523
The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.
- Обновитесь до 8:6.9.7.4+dfsg-14
Опубликовано ОбновленоCVE-2017-11505
The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11478
The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11450
coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано ОбновленоCVE-2017-11449
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.
- Обновитесь до 8:6.9.7.4+dfsg-12
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.