CVE-2017-15016
- EPSS 0.3%
- Veröffentlicht 05.10.2017 01:29:05
- Zuletzt bearbeitet 20.04.2025 01:37:25
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.
CVE-2017-14989
- EPSS 0.35%
- Veröffentlicht 03.10.2017 01:29:02
- Zuletzt bearbeitet 20.04.2025 01:37:25
A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the Imag...
CVE-2017-14739
- EPSS 0.69%
- Veröffentlicht 26.09.2017 02:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/di...
CVE-2017-14741
- EPSS 0.38%
- Veröffentlicht 26.09.2017 02:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file.
CVE-2017-14684
- EPSS 0.22%
- Veröffentlicht 22.09.2017 01:29:25
- Zuletzt bearbeitet 20.04.2025 01:37:25
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file...
CVE-2017-14682
- EPSS 0.45%
- Veröffentlicht 21.09.2017 23:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerab...
CVE-2017-14626
- EPSS 1.12%
- Veröffentlicht 21.09.2017 05:29:01
- Zuletzt bearbeitet 20.04.2025 01:37:25
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.
CVE-2017-14624
- EPSS 1.51%
- Veröffentlicht 21.09.2017 05:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.
CVE-2017-14625
- EPSS 1.51%
- Veröffentlicht 21.09.2017 05:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.
CVE-2017-14607
- EPSS 1.68%
- Veröffentlicht 20.09.2017 17:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.