Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

imagemagick imagemagick 7.0.1-1 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2016-4563
The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick prior to 6.9.4-0 and 7.x prior to 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote malicious users to cause a denial of service (buffer overflow an...
Imagemagick Imagemagick 7.0.1-0Imagemagick Imagemagick 7.0.0-0Imagemagick ImagemagickImagemagick Imagemagick 7.0.1-1
9.8
CVSSv3
CVE-2016-4564
The DrawImage function in MagickCore/draw.c in ImageMagick prior to 6.9.4-0 and 7.x prior to 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote malicious users to cause a denial of service (buffer overflow and application crash) o...
Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-0Imagemagick Imagemagick 7.0.0-0Imagemagick Imagemagick
8.8
CVSSv3
CVE-2016-4562
The DrawDashPolygon function in MagickCore/draw.c in ImageMagick prior to 6.9.4-0 and 7.x prior to 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote malicious users to cause a denial of service (buffer overflow and application crash) or possibl...
Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-0Imagemagick Imagemagick 7.0.0-0Imagemagick Imagemagick
9.8
CVSSv3
CVE-2016-5687
The VerticalFilter function in the DDS coder in ImageMagick prior to 6.9.4-3 and 7.x prior to 7.0.1-4 allows remote malicious users to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-3Imagemagick Imagemagick 7.0.1-2Imagemagick ImagemagickImagemagick Imagemagick 7.0.1-0Oracle Solaris 11.3
8.1
CVSSv3
CVE-2016-5688
The WPG parser in ImageMagick prior to 6.9.4-4 and 7.x prior to 7.0.1-5, when a memory limit is set, allows remote malicious users to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPix...
Oracle Solaris 11.3Imagemagick Imagemagick 7.0.1-4Imagemagick Imagemagick 7.0.1-1Imagemagick ImagemagickImagemagick Imagemagick 7.0.1-3Imagemagick Imagemagick 7.0.1-2Imagemagick Imagemagick 7.0.1-0
9.8
CVSSv3
CVE-2016-5689
The DCM reader in ImageMagick prior to 6.9.4-5 and 7.x prior to 7.0.1-7 allows remote malicious users to have unspecified impact by leveraging lack of NULL pointer checks.
Oracle Solaris 11.3Imagemagick Imagemagick 7.0.1-4Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-5Imagemagick Imagemagick 7.0.1-3Imagemagick Imagemagick 7.0.1-2Imagemagick ImagemagickImagemagick Imagemagick 7.0.1-0Imagemagick Imagemagick 7.0.1-6
9.8
CVSSv3
CVE-2016-5690
The ReadDCMImage function in DCM reader in ImageMagick prior to 6.9.4-5 and 7.x prior to 7.0.1-7 allows remote malicious users to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.
Oracle Solaris 11.3Imagemagick Imagemagick 7.0.1-4Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-5Imagemagick Imagemagick 7.0.1-3Imagemagick Imagemagick 7.0.1-2Imagemagick ImagemagickImagemagick Imagemagick 7.0.1-0Imagemagick Imagemagick 7.0.1-6
9.8
CVSSv3
CVE-2016-5691
The DCM reader in ImageMagick prior to 6.9.4-5 and 7.x prior to 7.0.1-7 allows remote malicious users to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2) pixel.green, and (3) pixel.blue.
Oracle Solaris 11.3Imagemagick Imagemagick 7.0.1-4Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-5Imagemagick Imagemagick 7.0.1-3Imagemagick Imagemagick 7.0.1-2Imagemagick ImagemagickImagemagick Imagemagick 7.0.1-0Imagemagick Imagemagick 7.0.1-6
8.8
CVSSv3
CVE-2016-6491
Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick prior to 6.9.5-4 and 7.x prior to 7.0.2-6 allows remote malicious users to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.
Imagemagick Imagemagick 7.0.2-0Imagemagick Imagemagick 7.0.1-10Imagemagick Imagemagick 7.0.1-3Imagemagick Imagemagick 7.0.1-2Imagemagick Imagemagick 7.0.2-4Imagemagick Imagemagick 7.0.2-3Imagemagick Imagemagick 7.0.1-7Imagemagick Imagemagick 7.0.1-6Imagemagick Imagemagick 7.0.2-2Imagemagick Imagemagick 7.0.2-1Imagemagick Imagemagick 7.0.1-5Imagemagick Imagemagick 7.0.1-4Imagemagick Imagemagick 7.0.2-5Imagemagick Imagemagick 7.0.1-9Imagemagick Imagemagick 7.0.1-8Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-0Imagemagick ImagemagickOracle Solaris 10.0Oracle Solaris 11.3
5.5
CVSSv3
CVE-2017-5508
Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick prior to 6.9.7-3 and 7.x prior to 7.0.4-3 allows remote malicious users to cause a denial of service (application crash) via a crafted TIFF file.
Imagemagick Imagemagick 7.0.1-3Imagemagick Imagemagick 7.0.1-4Imagemagick Imagemagick 7.0.2-10Imagemagick Imagemagick 7.0.2-2Imagemagick Imagemagick 7.0.2-9Imagemagick Imagemagick 7.0.3-0Imagemagick Imagemagick 7.0.3-6Imagemagick Imagemagick 7.0.3-7Imagemagick Imagemagick 7.0.1-5Imagemagick Imagemagick 7.0.1-6Imagemagick Imagemagick 7.0.2-3Imagemagick Imagemagick 7.0.2-4Imagemagick Imagemagick 7.0.3-1Imagemagick Imagemagick 7.0.3-10Imagemagick Imagemagick 7.0.3-8Imagemagick Imagemagick 7.0.3-9Imagemagick Imagemagick 7.0.1-0Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-7Imagemagick Imagemagick 7.0.1-8Imagemagick Imagemagick 7.0.2-5Imagemagick Imagemagick 7.0.2-6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook