CVE-2016-7972
- EPSS 2.34%
- Veröffentlicht 03.03.2017 16:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.
CVE-2016-9830
- EPSS 0.6%
- Veröffentlicht 01.03.2017 20:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image.
CVE-2016-8677
- EPSS 0.65%
- Veröffentlicht 15.02.2017 21:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.
CVE-2016-8866
- EPSS 0.68%
- Veröffentlicht 15.02.2017 19:59:01
- Zuletzt bearbeitet 20.04.2025 01:37:25
The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because...
CVE-2016-8682
- EPSS 1.78%
- Veröffentlicht 15.02.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
CVE-2016-8683
- EPSS 0.29%
- Veröffentlicht 15.02.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
CVE-2016-8684
- EPSS 1.43%
- Veröffentlicht 15.02.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."
CVE-2016-8693
- EPSS 0.83%
- Veröffentlicht 15.02.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.
CVE-2016-7446
- EPSS 2.02%
- Veröffentlicht 06.02.2017 17:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors. Note: This vulnerability exists due to an incomplete patch for CVE-2016-2317.
CVE-2016-7447
- EPSS 2.03%
- Veröffentlicht 06.02.2017 17:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors.