CVE-2016-7799
MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.3
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de imagemagick · Page n° 17
Vulnérabilité publiée pour imagemagick au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 341
CVE-2016-7101
The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-6823
Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-8707
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.5
Publication Mise à jourCVE-2016-6491
Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-5842
MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-5841
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-5691
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2) pixel.green, and (3) pixel.blue.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-5690
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-5689
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-5688
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex function or an invalid write operation in the (2) ScaleCharToQuantum or (3) SetPixelIndex functions.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-5687
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-5118
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.1
Publication Mise à jourCVE-2016-4564
The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-4563
The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-4562
The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.2
Publication Mise à jourCVE-2016-3718
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.1
Publication Mise à jourCVE-2016-3717
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.1
Publication Mise à jourCVE-2016-3716
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.1
Publication Mise à jourCVE-2016-3715
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
- Mettez à jour vers 8:6.8.9.9-7ubuntu5.1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.