DeutschShown in its original language — a full translation is planned for a future version.
ImageMagick: Mehrere Schwachstellen
view advisory published 2016-08-25
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Zustand herbeizuführen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-5010US | medium6.5 | — | ||
coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file. | ||||
| CVE-2016-5842US | high7.5 | — | ||
MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bo… | ||||
| CVE-2016-5841US | critical9.8 | — | ||
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code… | ||||
| CVE-2016-5691US | critical9.8 | — | ||
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2) pixel.… | ||||
| CVE-2016-5690US | critical9.8 | — | ||
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statem… | ||||
| CVE-2016-5689US | critical9.8 | — | ||
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks. | ||||
| CVE-2016-5688US | high8.1 | — | ||
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetIm… | ||||
| CVE-2016-5687US | critical9.8 | — | ||
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which t… | ||||
02
references
External citations — patches, advisories, analysis.
- Ubuntu Security Notice USN-3131-1 vom 2016-11-21external
- Amazon Linux Security Advisory ALAS-2024-1926 vom 2024-03-19external
- Debian Security Advisory DSA-3652-1 vom 2016-08-25external
- WID-SEC-W-2024-0666 - CSAF Versionself
- WID-SEC-2024-0666 - Portal Versionself
- SUSE Security Update SUSE-SU-2016:2964-1 vom 2016-12-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan