CVE-2017-5509
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.
- Обновитесь до 8:6.9.7.4+dfsg-1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости imagemagick · Страница 37
За последние 30 дней в imagemagick опубликовано уязвимостей: 82; в каталоге KEV: 0.
Уязвимостей: 864
CVE-2017-5508
Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file.
- Обновитесь до 8:6.9.7.4+dfsg-1
Опубликовано ОбновленоCVE-2017-5507
Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache.
- Обновитесь до 8:6.9.7.4+dfsg-1
Опубликовано ОбновленоCVE-2017-5506
Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file.
- Обновитесь до 8:6.9.7.4+dfsg-1
Опубликовано ОбновленоCVE-2016-10146
Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
- Обновитесь до 8:6.9.7.0+dfsg-2
Опубликовано ОбновленоCVE-2016-10145
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy.
- Обновитесь до 8:6.9.7.4+dfsg-1
Опубликовано ОбновленоCVE-2016-10144
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.
- Обновитесь до 8:6.9.7.4+dfsg-1
Опубликовано ОбновленоCVE-2016-9556
The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.
- Обновитесь до 8:6.9.6.5+dfsg-1
Опубликовано ОбновленоCVE-2016-10059
Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10058
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service (memory consumption) via a crafted image file.
- Обновитесь до 8:6.9.6.5+dfsg-1
Опубликовано ОбновленоCVE-2016-10057
Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10056
Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10055
Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10054
Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10053
The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10052
Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10051
Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10050
Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10049
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10048
Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.
- Обновитесь до 8:6.9.5.7+dfsg-1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.