imagemagick vulnerabilities · Page 36

CVE-2014-9822

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.

• Update to 8:6.8.9.9-4

CVE-2014-9821

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.

• Update to 8:6.8.9.9-4

CVE-2014-9820

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.

• Update to 8:6.8.9.9-4

CVE-2014-9819

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9823.

• Update to 8:6.8.9.9-4

CVE-2014-9818

ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.

• Update to 8:6.8.9.9-4

CVE-2014-9817

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.

• Update to 8:6.8.9.9-4

CVE-2014-9816

ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.

• Update to 8:6.8.9.9-4

CVE-2014-9815

ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.

• Update to 8:6.8.9.9-4

CVE-2014-9814

ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.

• Update to 8:6.8.9.9-4

CVE-2014-9813

ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.

• Update to 8:6.8.9.9-4

CVE-2014-9812

ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.

• Update to 8:6.8.9.9-4

CVE-2014-9811

The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed xwd file.

• Update to 8:6.8.9.9-4

CVE-2014-9810

The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed dpx file.

• Update to 8:6.8.9.9-4

CVE-2014-9809

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.

• Update to 8:6.8.9.9-4

CVE-2014-9808

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.

• Update to 8:6.8.9.9-4

CVE-2014-9807

The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.

• Update to 8:6.8.9.9-4

CVE-2014-9806

ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.

• Update to 8:6.8.9.9-4

CVE-2014-9805

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.

• Update to 8:6.8.9.9-4

CVE-2014-9804

vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object."

• Update to 8:6.8.9.9-4

CVE-2017-7275

The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.