CVE-2017-14138
- EPSS 0.32%
- Veröffentlicht 04.09.2017 23:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.
CVE-2017-14139
- EPSS 0.38%
- Veröffentlicht 04.09.2017 23:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.
CVE-2017-12691
- EPSS 0.82%
- Veröffentlicht 01.09.2017 21:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
CVE-2017-12692
- EPSS 0.82%
- Veröffentlicht 01.09.2017 21:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file.
CVE-2017-12693
- EPSS 0.81%
- Veröffentlicht 01.09.2017 21:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file.
CVE-2017-14060
- EPSS 0.48%
- Veröffentlicht 31.08.2017 15:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c f...
CVE-2017-13768
- EPSS 0.87%
- Veröffentlicht 30.08.2017 09:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows an attacker to perform denial of service by sending a crafted image file.
CVE-2017-13769
- EPSS 0.53%
- Veröffentlicht 30.08.2017 09:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file.
CVE-2017-13758
- EPSS 1.02%
- Veröffentlicht 29.08.2017 23:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c.
CVE-2017-12875
- EPSS 0.51%
- Veröffentlicht 29.08.2017 15:29:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file.