Поиск уязвимостей
Количество 20
Количество 20
ALT-PU-2021-1001
ALT-PU-2021-1001: package `ImageMagick` update to version 6.9.11.53-alt1
CVE-2020-29599
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
CVE-2020-29599
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
CVE-2020-29599
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
CVE-2020-29599
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the - ...
CVE-2020-27752
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVE-2020-27752
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVE-2020-27752
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVE-2020-27752
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An at ...
GHSA-685x-r4m9-ffxr
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
ELSA-2021-0024
ELSA-2021-0024: ImageMagick security update (IMPORTANT)
BDU:2021-03444
Уязвимость опции -authenticate консольного графического редактора ImageMagick, связанная с ошибками в обработке XML-запросов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
GHSA-8h84-r7fq-5pcm
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.
BDU:2021-01009
Уязвимость консольного графического редактора ImageMagick, вызванная переполнением буфера, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации
SUSE-SU-2021:0153-1
Security update for ImageMagick
openSUSE-SU-2021:0148-1
Security update for ImageMagick
openSUSE-SU-2021:0136-1
Security update for ImageMagick
SUSE-SU-2021:0156-1
Security update for ImageMagick
SUSE-SU-2021:14598-1
Security update for ImageMagick
SUSE-SU-2021:0199-1
Security update for ImageMagick
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-1001 ALT-PU-2021-1001: package `ImageMagick` update to version 6.9.11.53-alt1 | CVSS3: 7.8 | почти 6 лет назад | |
 | CVE-2020-29599 ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c. | CVSS3: 7.8 | 8% Низкий | почти 6 лет назад |
 | CVE-2020-29599 ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c. | CVSS3: 7.3 | 8% Низкий | почти 6 лет назад |
 | CVE-2020-29599 ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c. | CVSS3: 7.8 | 8% Низкий | почти 6 лет назад |
| CVE-2020-29599 ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the - ... | CVSS3: 7.8 | 8% Низкий | почти 6 лет назад |
| CVE-2020-27752 A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0. | CVSS3: 7.1 | 1% Низкий | почти 6 лет назад |
| CVE-2020-27752 A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0. | CVSS3: 7.1 | 1% Низкий | около 7 лет назад |
| CVE-2020-27752 A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0. | CVSS3: 7.1 | 1% Низкий | почти 6 лет назад |
| CVE-2020-27752 A flaw was found in ImageMagick in MagickCore/quantum-private.h. An at ... | CVSS3: 7.1 | 1% Низкий | почти 6 лет назад |
| GHSA-685x-r4m9-ffxr ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c. | CVSS3: 7.8 | 8% Низкий | больше 4 лет назад |
| ELSA-2021-0024 ELSA-2021-0024: ImageMagick security update (IMPORTANT) | 8% Низкий | почти 6 лет назад | |
 | BDU:2021-03444 Уязвимость опции -authenticate консольного графического редактора ImageMagick, связанная с ошибками в обработке XML-запросов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.3 | 8% Низкий | почти 6 лет назад |
| GHSA-8h84-r7fq-5pcm A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0. | 1% Низкий | больше 4 лет назад | |
| BDU:2021-01009 Уязвимость консольного графического редактора ImageMagick, вызванная переполнением буфера, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации | CVSS3: 7.1 | 1% Низкий | почти 6 лет назад |
 | SUSE-SU-2021:0153-1 Security update for ImageMagick | почти 6 лет назад | ||
| openSUSE-SU-2021:0148-1 Security update for ImageMagick | почти 6 лет назад | ||
| openSUSE-SU-2021:0136-1 Security update for ImageMagick | почти 6 лет назад | ||
| SUSE-SU-2021:0156-1 Security update for ImageMagick | почти 6 лет назад | ||
| SUSE-SU-2021:14598-1 Security update for ImageMagick | почти 6 лет назад | ||
| SUSE-SU-2021:0199-1 Security update for ImageMagick | почти 6 лет назад |
Уязвимостей на страницу