Browse CVEs

MEDIUM 5.5 CVE-2014-9915 Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM profile. Imagemagick after 6.6.0-3 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-10046 Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of serv… Imagemagick after 6.9.5-4 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-10047 Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memor… Imagemagick after 6.9.4-6 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-10053 The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (divide-by-zero error… Imagemagick after 6.9.5-7 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-10058 Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service (memory … Imagemagick after 6.9.6-2 Fix from $1,6002017-03-23 HIGH 7.8 CVE-2014-9832 Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file. Imagemagick Mitigation only Fix from $1,9502017-03-22 HIGH 7.8 CVE-2014-9833 Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. Imagemagick Mitigation only Fix from $1,9502017-03-22 HIGH 7.8 CVE-2014-9834 Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. Imagemagick Mitigation only Fix from $1,9502017-03-22 HIGH 7.8 CVE-2014-9835 Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. Imagemagick Mitigation only Fix from $1,9502017-03-22 HIGH 7.5 CVE-2014-9839 magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access). Imagemagick Mitigation only Fix from $1,9502017-03-22 MEDIUM 5.5 CVE-2014-9836 ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file. Imagemagick Mitigation only Fix from $1,6002017-03-22 MEDIUM 5.5 CVE-2014-9838 magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash). Imagemagick Mitigation only Fix from $1,6002017-03-22 MEDIUM 5.5 CVE-2014-9840 ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file. Imagemagick Mitigation only Fix from $1,6002017-03-22 CRITICAL 9.8 CVE-2014-9852 distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspec… Imagemagick 6.9.4-0+ Fix from $2,3002017-03-17 CRITICAL 9.8 CVE-2016-5239 The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspeci… Imagemagick after 6.9.3-9 Fix from $2,3002017-03-15 HIGH 7.5 CVE-2015-8895 Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a cra… Imagemagick Patch available Fix from $1,9502017-03-15 MEDIUM 5.5 CVE-2015-8894 Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via… Imagemagick Patch available Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2015-8897 The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application cr… Imagemagick after 6.9.2-3 Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2015-8898 The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dere… Imagemagick after 6.9.2-3 Fix from $1,6002017-03-15 HIGH 7.5 CVE-2016-10252 Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, allows att… Imagemagick after 6.9.2-1 Fix from $1,9502017-03-14 HIGH 7.5 CVE-2017-6497 An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS). Imagemagick Patch available Fix from $1,9502017-03-06 MEDIUM 5.5 CVE-2017-6501 An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference. Imagemagick Patch available Fix from $1,6002017-03-06 MEDIUM 5.5 CVE-2017-6502 An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS). Imagemagick Patch available Fix from $1,6002017-03-06 MEDIUM 5.5 CVE-2016-10070 Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of serv… Imagemagick after 6.9.3-10 Fix from $1,6002017-03-03 HIGH 7.8 CVE-2016-10065 The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or… Imagemagick after 6.9.7-10 Fix from $1,9502017-03-03 MEDIUM 6.5 CVE-2016-10061 The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remo… Imagemagick 6.9.4-8 / 7.0.1-10+ Fix from $1,6002017-03-03 MEDIUM 5.5 CVE-2016-10066 Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (ap… Imagemagick after 6.9.4-4 Fix from $1,6002017-03-03 HIGH 7.8 CVE-2016-10063 Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other… Imagemagick after 6.9.5-0 Fix from $1,9502017-03-02 HIGH 7.8 CVE-2016-10064 Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other… Imagemagick after 6.9.5-0 Fix from $1,9502017-03-02 HIGH 7.5 CVE-2016-10067 magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too man… Imagemagick after 6.9.4-4 Fix from $1,9502017-03-02