Imagemagick : Security Vulnerabilities (Gain Information) (CVSS score >= 1)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-16323	200	+Info	2018-09-01	2019-06-25	4.3	None	Remote	Medium	Not required	Partial	None	None
ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.
2	CVE-2017-15277	200	+Info	2017-10-12	2018-10-18	4.3	None	Remote	Medium	Not required	Partial	None	None
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.
3	CVE-2017-13143	200	+Info	2017-08-23	2018-06-13	5.0	None	Remote	Low	Not required	Partial	None	None
In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.
4	CVE-2017-11448	200	+Info	2017-07-19	2017-07-20	4.3	None	Remote	Medium	Not required	Partial	None	None
The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.
5	CVE-2017-10928	125	+Info	2017-07-05	2019-10-02	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c.
6	CVE-2017-9098	200	+Info	2017-05-19	2018-08-03	5.0	None	Remote	Low	Not required	Partial	None	None
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.
7	CVE-2016-5842	125	+Info	2016-12-13	2017-06-30	5.0	None	Remote	Low	Not required	Partial	None	None
MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.
8	CVE-2016-3717	200	+Info	2016-05-05	2018-10-09	7.1	None	Remote	Medium	Not required	Complete	None	None
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
9	CVE-2007-1667	189	DoS Overflow +Info	2007-03-24	2018-10-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.

Total number of vulnerabilities : 9 Page : 1 (This Page)