CVE-2017-6498
An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.
- Actualiza a 8:6.7.7.10-6ubuntu3.6
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de imagemagick · Página 15
Vulnerabilidades publicadas para imagemagick en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 321
CVE-2016-10070
Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10066
Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10065
The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10061
The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) via a crafted image file.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10071
coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10069
coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10068
The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10067
magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too many exceptions," which trigger a buffer overflow.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10064
Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10063
Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file, related to extend validity.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-10062
The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
- Actualiza a 8:6.7.7.10-6ubuntu3.5
Publicación ActualizaciónCVE-2016-9559
coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted image.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2015-8903
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted VICAR file.
- Actualiza a 8:6.7.7.10-6ubuntu3.2
Publicación ActualizaciónCVE-2015-8902
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file.
- Actualiza a 8:6.7.7.10-6ubuntu3.2
Publicación ActualizaciónCVE-2015-8901
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.
- Actualiza a 8:6.7.7.10-6ubuntu3.2
Publicación ActualizaciónCVE-2015-8900
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.
- Actualiza a 8:6.7.7.10-6ubuntu3.2
Publicación Actualizaciónimagemagick regression
USN-3142-1 fixed vulnerabilities in ImageMagick. The security fixes introduced a regression with text labels and a regression with the text coder. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.
- Actualiza a 8:6.7.7.10-6ubuntu3.4
Publicación ActualizaciónCVE-2016-8677
The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación ActualizaciónCVE-2016-8862
The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.
- Actualiza a 8:6.7.7.10-6ubuntu3.3
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.