imagemagick imagemagick 6.3.3 5 vulnerabilities and exploits

(subscribe to this query)

Untrusted search path vulnerability in configure.c in ImageMagick prior to 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.

ImageMagick prior to 6.3.5-9 allows context-dependent malicious users to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage functio...

Multiple integer overflows in ImageMagick prior to 6.3.5-9 allow context-dependent malicious users to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.

Off-by-one error in the ReadBlobString function in blob.c in ImageMagick prior to 6.3.5-9 allows context-dependent malicious users to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.

Multiple integer overflows in ImageMagick prior to 6.3.3-5 allow remote malicious users to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, ...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook