CVE-2014-9842
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
- Обновитесь до 8:6.8.9.9-4
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости imagemagick · Страница 39
За последние 30 дней в imagemagick опубликовано уязвимостей: 82; в каталоге KEV: 0.
Уязвимостей: 864
CVE-2014-9841
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."
- Обновитесь до 8:6.8.9.9-4
Опубликовано ОбновленоCVE-2014-9854
coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."
- Обновитесь до 8:6.8.9.9-4
Опубликовано ОбновленоCVE-2014-9853
Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
- Обновитесь до 8:6.8.9.9-4
Опубликовано ОбновленоCVE-2014-9852
distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.
- Обновитесь до 8:6.8.9.9-4
Опубликовано ОбновленоCVE-2016-5239
The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2015-8898
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image file.
- Обновитесь до 8:6.8.9.9-7
Опубликовано ОбновленоCVE-2015-8897
The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application crash) via a crafted png file.
- Обновитесь до 8:6.8.9.9-7
Опубликовано ОбновленоCVE-2015-8896
Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
- Обновитесь до 8:6.8.9.9-7
Опубликовано ОбновленоCVE-2015-8895
Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow.
- Обновитесь до 8:6.8.9.9-7
Опубликовано ОбновленоCVE-2015-8894
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted tga file.
- Обновитесь до 8:6.8.9.9-6
Опубликовано ОбновленоCVE-2016-10252
Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, allows attackers to trigger memory consumption.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2017-6502
An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).
- Обновитесь до 8:6.9.9.34+dfsg-3
Опубликовано ОбновленоCVE-2017-6501
An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.
- Обновитесь до 8:6.9.7.4+dfsg-2
Опубликовано ОбновленоCVE-2017-6500
An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.
- Обновитесь до 8:6.9.7.4+dfsg-2
Опубликовано ОбновленоCVE-2017-6499
An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS).
- Обновитесь до 8:6.9.7.4+dfsg-2
Опубликовано ОбновленоCVE-2017-6498
An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.
- Обновитесь до 8:6.9.7.4+dfsg-2
Опубликовано ОбновленоCVE-2017-6497
An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS).
- Обновитесь до 8:6.9.7.4+dfsg-2
Опубликовано ОбновленоCVE-2016-10070
Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано ОбновленоCVE-2016-10066
Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a crafted file.
- Обновитесь до 8:6.9.6.2+dfsg-2
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.