CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Imagemagick : Security Vulnerabilities

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2017-9501 20 DoS 2017-06-07 2017-06-12
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.
2 CVE-2017-9500 20 DoS 2017-06-07 2017-06-12
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file.
3 CVE-2017-9499 20 DoS 2017-06-07 2017-06-12
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a crafted file.
4 CVE-2017-9440 119 DoS Overflow 2017-06-05 2017-06-09
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file.
5 CVE-2017-9439 119 DoS Overflow 2017-06-05 2017-06-09
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file.
6 CVE-2017-9409 119 DoS Overflow 2017-06-02 2017-06-06
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.
7 CVE-2017-9407 119 DoS Overflow 2017-06-02 2017-06-06
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.
8 CVE-2017-9405 119 DoS Overflow 2017-06-02 2017-06-06
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file.
9 CVE-2017-9262 119 DoS Overflow 2017-05-29 2017-06-05
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
10 CVE-2017-9261 119 DoS Overflow 2017-05-29 2017-06-05
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
11 CVE-2017-9144 20 2017-05-22 2017-05-26
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.
12 CVE-2017-9143 119 DoS Overflow 2017-05-22 2017-05-31
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art file.
13 CVE-2017-9142 20 2017-05-22 2017-05-31
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.
14 CVE-2017-9141 20 2017-05-22 2017-05-26
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c.
15 CVE-2017-9098 200 +Info 2017-05-19 2017-06-02
5.0
None Remote Low Not required Partial None None
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.
16 CVE-2017-8830 119 DoS Overflow 2017-05-08 2017-05-31
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file.
17 CVE-2017-8765 399 2017-05-04 2017-05-31
7.1
None Remote Medium Not required None None Complete
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file.
18 CVE-2017-8357 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file.
19 CVE-2017-8356 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file.
20 CVE-2017-8355 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file.
21 CVE-2017-8354 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file.
22 CVE-2017-8353 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file.
23 CVE-2017-8352 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file.
24 CVE-2017-8351 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file.
25 CVE-2017-8350 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
26 CVE-2017-8349 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file.
27 CVE-2017-8348 119 DoS Overflow 2017-04-30 2017-05-11
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) via a crafted file.
28 CVE-2017-8347 119 DoS Overflow 2017-04-30 2017-05-10
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted file.
29 CVE-2017-8346 119 DoS Overflow 2017-04-30 2017-05-10
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted file.
30 CVE-2017-8345 119 DoS Overflow 2017-04-30 2017-05-08
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
31 CVE-2017-8344 119 DoS Overflow 2017-04-30 2017-05-08
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file.
32 CVE-2017-8343 119 DoS Overflow 2017-04-30 2017-05-08
4.3
None Remote Medium Not required None None Partial
In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file.
33 CVE-2017-7943 399 2017-04-18 2017-05-09
4.3
None Remote Medium Not required None None Partial
The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
34 CVE-2017-7942 399 2017-04-18 2017-05-09
4.3
None Remote Medium Not required None None Partial
The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
35 CVE-2017-7941 399 2017-04-18 2017-05-09
4.3
None Remote Medium Not required None None Partial
The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
36 CVE-2017-7619 2017-04-10 2017-05-31
5.0
None Remote Low Not required None None Partial
In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab, and ModulateLCHuv.
37 CVE-2017-7606 20 DoS 2017-04-09 2017-05-31
4.3
None Remote Medium Not required None None Partial
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
38 CVE-2017-7275 119 DoS Overflow 2017-03-27 2017-03-29
4.3
None Remote Medium Not required None None Partial
The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.
39 CVE-2017-6502 119 Overflow 2017-03-05 2017-03-13
4.3
None Remote Medium Not required None None Partial
An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).
40 CVE-2017-6501 476 2017-03-05 2017-03-07
4.3
None Remote Medium Not required None None Partial
An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.
41 CVE-2017-6500 125 2017-03-05 2017-03-07
4.3
None Remote Medium Not required None None Partial
An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.
42 CVE-2017-6499 399 2017-03-05 2017-03-07
4.3
None Remote Medium Not required None None Partial
An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS).
43 CVE-2017-6498 20 2017-03-05 2017-03-07
4.3
None Remote Medium Not required None None Partial
An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.
44 CVE-2017-6497 476 2017-03-05 2017-03-07
5.0
None Remote Low Not required None None Partial
An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS).
45 CVE-2017-5511 119 Overflow 2017-03-24 2017-03-27
7.5
None Remote Low Not required Partial Partial Partial
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.
46 CVE-2017-5510 787 2017-03-24 2017-03-27
6.8
None Remote Medium Not required Partial Partial Partial
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.
47 CVE-2017-5509 787 2017-03-24 2017-03-27
6.8
None Remote Medium Not required Partial Partial Partial
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.
48 CVE-2017-5508 119 DoS Overflow 2017-03-24 2017-03-27
4.3
None Remote Medium Not required None None Partial
Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file.
49 CVE-2017-5507 399 DoS 2017-03-24 2017-03-27
7.8
None Remote Low Not required None None Complete
Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache.
50 CVE-2017-5506 415 2017-03-24 2017-03-27
6.8
None Remote Medium Not required Partial Partial Partial
Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file.
Total number of vulnerabilities : 246   Page : 1 (This Page)2 3 4 5
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.