CVE-2016-7799
MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
- Actualiza a 8:6.8.9.9-7ubuntu5.3
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de imagemagick · Página 17
Vulnerabilidades publicadas para imagemagick en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 341
CVE-2016-7101
The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-6823
Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-8707
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.
- Actualiza a 8:6.8.9.9-7ubuntu5.5
Publicación ActualizaciónCVE-2016-6491
Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-5842
MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-5841
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-5691
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2) pixel.green, and (3) pixel.blue.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-5690
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-5689
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-5688
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex function or an invalid write operation in the (2) ScaleCharToQuantum or (3) SetPixelIndex functions.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-5687
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-5118
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
- Actualiza a 8:6.8.9.9-7ubuntu5.1
Publicación ActualizaciónCVE-2016-4564
The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-4563
The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-4562
The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- Actualiza a 8:6.8.9.9-7ubuntu5.2
Publicación ActualizaciónCVE-2016-3718
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
- Actualiza a 8:6.8.9.9-7ubuntu5.1
Publicación ActualizaciónCVE-2016-3717
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
- Actualiza a 8:6.8.9.9-7ubuntu5.1
Publicación ActualizaciónCVE-2016-3716
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
- Actualiza a 8:6.8.9.9-7ubuntu5.1
Publicación ActualizaciónCVE-2016-3715
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
- Actualiza a 8:6.8.9.9-7ubuntu5.1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.