Imagemagick

Imagemagick

725 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2016-5690

Exploit
  • EPSS 1.54%
  • Veröffentlicht 13.12.2016 15:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.

9.8

CVE-2016-5689

Exploit
  • EPSS 1.98%
  • Veröffentlicht 13.12.2016 15:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks.

8.1

CVE-2016-5688

  • EPSS 2.24%
  • Veröffentlicht 13.12.2016 15:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer ov...

9.8

CVE-2016-5687

  • EPSS 0.75%
  • Veröffentlicht 13.12.2016 15:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.

10

CVE-2016-5118

  • EPSS 31.78%
  • Veröffentlicht 10.06.2016 15:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.

9.8

CVE-2016-4564

  • EPSS 0.77%
  • Veröffentlicht 04.06.2016 16:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote attackers to cause a denial of service (buffer overflow and ...

8.8

CVE-2016-4563

  • EPSS 0.77%
  • Veröffentlicht 04.06.2016 16:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service...

8.8

CVE-2016-4562

  • EPSS 0.77%
  • Veröffentlicht 04.06.2016 16:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and applicati...

5.5

CVE-2016-3718

Warnung
  • EPSS 83.83%
  • Veröffentlicht 05.05.2016 18:59:08
  • Zuletzt bearbeitet 22.10.2025 00:15:52

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

7.1

CVE-2016-3717

  • EPSS 33.66%
  • Veröffentlicht 05.05.2016 18:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.