rpm package
opensuse/ImageMagick&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed
Vulnerabilities (225)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2007-4985 | — | < 7.1.0.8-1.2 | 7.1.0.8-1.2 | Sep 24, 2007 | ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, relat | ||
| CVE-2007-1797 | — | < 7.1.0.8-1.2 | 7.1.0.8-1.2 | Apr 2, 2007 | Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which re | ||
| CVE-2006-5456 | — | < 7.1.0.8-1.2 | 7.1.0.8-1.2 | Oct 23, 2006 | Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PA | ||
| CVE-2006-0082 | — | < 7.1.0.8-1.2 | 7.1.0.8-1.2 | Jan 4, 2006 | Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as | ||
| CVE-2005-4601 | — | < 7.1.0.8-1.2 | 7.1.0.8-1.2 | Dec 31, 2005 | The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command. |
- CVE-2007-4985Sep 24, 2007affected < 7.1.0.8-1.2fixed 7.1.0.8-1.2
ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, relat
- CVE-2007-1797Apr 2, 2007affected < 7.1.0.8-1.2fixed 7.1.0.8-1.2
Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which re
- CVE-2006-5456Oct 23, 2006affected < 7.1.0.8-1.2fixed 7.1.0.8-1.2
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PA
- CVE-2006-0082Jan 4, 2006affected < 7.1.0.8-1.2fixed 7.1.0.8-1.2
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as
- CVE-2005-4601Dec 31, 2005affected < 7.1.0.8-1.2fixed 7.1.0.8-1.2
The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.
Page 12 of 12