CVE-2016-5010
coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости imagemagick · Страница 14
За последние 30 дней в imagemagick опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 341
CVE-2015-8959
coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2015-8958
coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2015-8957
Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2016-7537
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2016-7533
The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WPG file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2016-7531
MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2016-7529
coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2016-7528
The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2016-7522
The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2016-7519
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2016-7515
The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the number of pixels.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2014-9907
coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.2
Опубликовано ОбновленоCVE-2017-7943
The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.7
Опубликовано ОбновленоCVE-2017-7941
The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.7
Опубликовано ОбновленоCVE-2017-7619
In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab, and ModulateLCHuv.
- Обновитесь до 8:6.8.9.9-7ubuntu5.7
Опубликовано ОбновленоCVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
- Обновитесь до 8:6.8.9.9-7ubuntu5.7
Опубликовано ОбновленоCVE-2017-5511
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.
- Обновитесь до 8:6.8.9.9-7ubuntu5.5
Опубликовано ОбновленоCVE-2017-5510
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.
- Обновитесь до 8:6.8.9.9-7ubuntu5.5
Опубликовано ОбновленоCVE-2017-5508
Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file.
- Обновитесь до 8:6.8.9.9-7ubuntu5.5
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.