CVE-2014-9854
- EPSS 1.51%
- Veröffentlicht 17.03.2017 14:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."
CVE-2015-8894
- EPSS 0.4%
- Veröffentlicht 15.03.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted tga file.
CVE-2015-8895
- EPSS 1.48%
- Veröffentlicht 15.03.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow.
CVE-2015-8896
- EPSS 0.55%
- Veröffentlicht 15.03.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
CVE-2015-8897
- EPSS 0.48%
- Veröffentlicht 15.03.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application crash) via a crafted png file.
CVE-2015-8898
- EPSS 0.12%
- Veröffentlicht 15.03.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image file.
CVE-2016-5239
- EPSS 0.92%
- Veröffentlicht 15.03.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.
CVE-2016-10252
- EPSS 0.84%
- Veröffentlicht 14.03.2017 22:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, allows attackers to trigger memory consumption.
CVE-2017-6497
- EPSS 0.82%
- Veröffentlicht 06.03.2017 02:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS).
CVE-2017-6498
- EPSS 0.28%
- Veröffentlicht 06.03.2017 02:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.