Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

imagemagick imagemagick 7.0.7-23 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2018-11251
In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows malicious users to cause a denial of service (application crash in SetGrayscaleImage in MagickCore/quantize.c) via a crafted SUN image file.
Imagemagick ImagemagickImagemagick Imagemagick 7.0.7-23
4.3
CVSSv2
CVE-2018-7443
The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote malicious users to cause a denial of service (memory allocation failure in the AcquireMagickMemory function in MagickCore/mem...
Imagemagick Imagemagick 7.0.7-23Debian Debian Linux 7.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 17.10
7.5
CVSSv2
CVE-2017-18210
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.
Imagemagick Imagemagick 7.0.7-8Imagemagick Imagemagick 7.0.7-9Imagemagick Imagemagick 7.0.7-10Imagemagick Imagemagick 7.0.7-11Imagemagick Imagemagick 7.0.7-25Imagemagick Imagemagick 7.0.7-5Imagemagick Imagemagick 7.0.7.7Imagemagick Imagemagick 7.0.7-12Imagemagick Imagemagick 7.0.7-14Imagemagick Imagemagick 7.0.7-16Imagemagick Imagemagick 7.0.7-21Imagemagick Imagemagick 7.0.7-23Imagemagick Imagemagick 7.0.7-0Imagemagick Imagemagick 7.0.7-1Imagemagick Imagemagick 7.0.7-2Imagemagick Imagemagick 7.0.7-3Imagemagick Imagemagick 7.0.7-17Imagemagick Imagemagick 7.0.7-18Imagemagick Imagemagick 7.0.7-19Imagemagick Imagemagick 7.0.7-20Imagemagick Imagemagick 7.0.7-4Imagemagick Imagemagick 7.0.7-6
6.8
CVSSv2
CVE-2017-18209
In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory.
Imagemagick Imagemagick 7.0.7-4Imagemagick Imagemagick 7.0.7-6Imagemagick Imagemagick 7.0.7-14Imagemagick Imagemagick 7.0.7-16Imagemagick Imagemagick 7.0.7-21Imagemagick Imagemagick 7.0.7-23Imagemagick Imagemagick 7.0.7-0Imagemagick Imagemagick 7.0.7-1Imagemagick Imagemagick 7.0.7-2Imagemagick Imagemagick 7.0.7-17Imagemagick Imagemagick 7.0.7-18Imagemagick Imagemagick 7.0.7-19Imagemagick Imagemagick 7.0.7-20Imagemagick Imagemagick 7.0.7-9Imagemagick Imagemagick 7.0.7-10Imagemagick Imagemagick 7.0.7-11Imagemagick Imagemagick 7.0.7-12Imagemagick Imagemagick 7.0.7-25Imagemagick Imagemagick 7.0.7.7Imagemagick Imagemagick 7.0.7-3Imagemagick Imagemagick 7.0.7-5Imagemagick Imagemagick 7.0.7-8
7.5
CVSSv2
CVE-2017-18211
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel.
Imagemagick Imagemagick 7.0.7-2Imagemagick Imagemagick 7.0.7-3Imagemagick Imagemagick 7.0.7-4Imagemagick Imagemagick 7.0.7-5Imagemagick Imagemagick 7.0.7-19Imagemagick Imagemagick 7.0.7-20Imagemagick Imagemagick 7.0.7-21Imagemagick Imagemagick 7.0.7-22Imagemagick Imagemagick 7.0.7-0Imagemagick Imagemagick 7.0.7.7Imagemagick Imagemagick 7.0.7-9Imagemagick Imagemagick 7.0.7-14Imagemagick Imagemagick 7.0.7-16Imagemagick Imagemagick 7.0.7-18Imagemagick Imagemagick 7.0.7-23Imagemagick Imagemagick 7.0.7-25Imagemagick Imagemagick 7.0.7-10Imagemagick Imagemagick 7.0.7-11Imagemagick Imagemagick 7.0.7-12Imagemagick Imagemagick 7.0.7-13Imagemagick Imagemagick 7.0.7-1Imagemagick Imagemagick 7.0.7-6
4.3
CVSSv2
CVE-2018-6405
In the ReadDCMImage function in coders/dcm.c in ImageMagick prior to 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote malicious users to cause a denial of serv...
Imagemagick ImagemagickCanonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 17.10Canonical Ubuntu Linux 18.04
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook