Published: 20/04/2017 Updated: 16/11/2020

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

coders/dds.c in ImageMagick prior to 6.9.0-4 Beta allows remote malicious users to cause a denial of service (CPU consumption) via a crafted DDS file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
imagemagick imagemagick

Several security issues were fixed in ImageMagick ...

This updates fixes many vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, RLE, RAW, PSD, Sun, PICT, VIFF, HDR, Meta, Quantum, PDB, DDS, DCM, EXIF, RGF or BMP files are processed For the stabl ...

coders/ddsc in ImageMagick before 690-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS file ...

CWE-399 https://github.com/ImageMagick/ImageMagick/commit/9b428b7af688fe319320aed15f2b94281d1e37b4 https://github.com/ImageMagick/ImageMagick/commit/3ab016764c7f787829d9065440d86f5609765110 https://bugzilla.redhat.com/show_bug.cgi?id=1378738 http://www.securityfocus.com/bid/93230 http://www.openwall.com/lists/oss-security/2016/09/22/2 http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26861 https://github.com/ImageMagick/ImageMagick/commit/cc2a4d2ba5371d25c58763e4db2dbc1f4691c0f7 https://usn.ubuntu.com/3131-1/https://nvd.nist.gov

CVE-2015-8959

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect