Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10038 State: PUBLISHED Published: 2016-12-24T11:00:00 Last Updated: 2024-08-06T03:07:31.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95097 - https://github.com/modxcms/revolution/pull/13177 - https://raw.githubusercontent.com/modxcms/revolution/v2.5.2-pl/core/docs/changelog.txt
CVE ID: CVE-2016-10039 State: PUBLISHED Published: 2016-12-24T11:00:00 Last Updated: 2024-08-06T03:07:31.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/getfiles. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95096 - https://github.com/modxcms/revolution/pull/13177 - https://raw.githubusercontent.com/modxcms/revolution/v2.5.2-pl/core/docs/changelog.txt
CVE ID: CVE-2016-10040 State: PUBLISHED Published: 2017-03-07T15:00:00 Last Updated: 2024-08-06T03:07:31.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of service (application crash) via a xml file with multiple nested open tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95113 - https://bugzilla.redhat.com/show_bug.cgi?id=1409597 - http://www.openwall.com/lists/oss-security/2016/12/24/2 - http://www.openwall.com/lists/oss-security/2017/01/14/4
CVE ID: CVE-2016-10041 State: PUBLISHED Published: 2016-12-25T06:50:00 Last Updated: 2024-08-06T03:07:32.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisites, a user must have created an online-connection, validly authenticated and authorized as administrator, and executed telegram simulation. After that, the online-connection must have been closed. Incorrect caching of client data then may lead to privilege escalation, where a subsequently acting non-admin user is permitted to do
ing of client data then may lead to privilege escalation, where a subsequently acting non-admin user is permitted to do telegram simulation. In order to exploit this vulnerability, a potential attacker would need to have both a valid engineering-account in the SPRECON RBAC system as well as access to a service/maintenance computer with SPRECON-E Service Program running. Additionally, a valid admin-user must have closed the service connection beforehand without closing the program, having executed telegram simulation; the attacker then has access to the running software instance. Hence, there is no risk from external attackers. Additional Analyst Notes: - CVE Program Container: References: -
ance. Hence, there is no risk from external attackers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95296 - https://www.sprecher-automation.com/en/it-security/
CVE ID: CVE-2016-10042 State: PUBLISHED Published: 2017-06-29T00:00:00 Last Updated: 2024-08-06T03:07:32.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2016-10042.txt
CVE ID: CVE-2016-10043 State: PUBLISHED Published: 2017-01-31T18:00:00 Last Updated: 2024-08-06T03:07:32.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use the pipe character (|) to inject arbitrary OS commands and retrieve the output in the application's responses. Attackers could execute unauthorized commands, which could then be used to disable the software, or read, write, and modify data for which the attacker does not have permissions to access directly. Since the targeted app
read, write, and modify data for which the attacker does not have permissions to access directly. Since the targeted application is directly executing the commands instead of the attacker, any malicious activities may appear to come from the application or the application's owner (apache user). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41179/
CVE ID: CVE-2016-10044 State: PUBLISHED Published: 2017-02-07T07:02:00 Last Updated: 2024-10-21T13:14:17.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.7 - http://www.securitytracker.com/id/1037798 - http://source.android.com/security/bulletin/2017-02-01.html - https://g
.7 - http://www.securitytracker.com/id/1037798 - http://source.android.com/security/bulletin/2017-02-01.html - https://github.com/torvalds/linux/commit/22f6b4d34fcf039c63a94e7670e0da24f8575a5a - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=22f6b4d34fcf039c63a94e7670e0da24f8575a5a - http://www.securityfocus.com/bid/96122
CVE ID: CVE-2016-10045 State: PUBLISHED Published: 2016-12-30T19:00:00 Last Updated: 2024-08-06T03:07:32.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html - http://pa
am Container: References: - http://packetstormsecurity.com/files/140286/PHPMailer-Remote-Code-Execution.html - http://packetstormsecurity.com/files/140350/PHPMailer-Sendmail-Argument-Injection.html - https://www.exploit-db.com/exploits/42221/ - https://www.exploit-db.com/exploits/40969/ - http://www.securityfocus.com/archive/1/539967/100/0/threaded - http://openwall.com/lists/oss-security/2016/12/28/1 - https://github.com/PHPMailer/PHPMailer/wiki/About-the-CVE-2016-10033-and-CVE-2016-10045-vulnerabilities - https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.20 - https://www.exploit-db.com/exploits/40986/ - http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection - ht
://www.exploit-db.com/exploits/40986/ - http://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection - http://www.securityfocus.com/bid/95130 - https://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10045-Vuln-Patch-Bypass.html - http://seclists.org/fulldisclosure/2016/Dec/81 - http://www.securitytracker.com/id/1037533 - https://developer.joomla.org/security-centre/668-20161205-phpmailer-security-advisory.html
CVE ID: CVE-2016-10046 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service (application crash) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/989f9f88ea6db09b99d25586e912c921c0da8d3f - https://bugzilla.redhat.com/show_bug.cgi?id=1410448 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - http://www.securityfocus.com/bid/95183
CVE ID: CVE-2016-10047 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:31.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95182 - https://bugzilla.redhat.com/show_bug.cgi?id=1410449 - https://github.com/ImageMagick/ImageMagick/commit/fc6080f1321fd21e86ef916195cc110b05d9effb - http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE ID: CVE-2016-10048 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1410451 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - https://github.com/ImageMagick/ImageMagick/commit/fc6080f1321fd21e86ef916195cc110b05d9effb - http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html - http://www.securityfocus.com/bid/9
95cc110b05d9effb - http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html - http://www.securityfocus.com/bid/95186 - http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE ID: CVE-2016-10049 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95180 - https://github.com/ImageMagick/ImageMagick/commit/3e9165285eda6e1bb71172031d3048b51bb443a4 - https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=29710 - https://bugzilla.redhat.com/show_bug.c
b443a4 - https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=29710 - https://bugzilla.redhat.com/show_bug.cgi?id=1410452 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/13db820f5e24cd993ee554e99377fea02a904e18
CVE ID: CVE-2016-10050 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95185 - https://github.com/ImageMagick/ImageMagick/commit/73fb0aac5b958521e1511e179ecc0ad49f70ebaf - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - http://lists.opensuse.org/opensuse-updat
d49f70ebaf - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html - https://bugzilla.redhat.com/show_bug.cgi?id=1410454 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/139d4323c40d7363bfdd2382c3821a6f76d69430
CVE ID: CVE-2016-10051 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/ecc03a2518c2b7dd375fde3a040fdae0bdf6a521 - http://www.securityfocus.com/bid/95187 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - https://www.imagemagick.org/discourse-serv
id/95187 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30245 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html - https://bugzilla.redhat.com/show_bug.cgi?id=1410456 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/548701354191a3dda5cffc6d415374b35b01d0b9
CVE ID: CVE-2016-10052 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/9e187b
tml - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/9e187b73a8a1290bb0e1a1c878f8be1917aa8742 - https://bugzilla.redhat.com/show_bug.cgi?id=1410459 - http://www.securityfocus.com/bid/95181 - https://github.com/ImageMagick/ImageMagick/commit/13267a10845a8dadabed63072b537f050cec6daa
CVE ID: CVE-2016-10053 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/f983dcdf9c178e0cbc49608a78713c5669aa1bb5 - https://bugzilla.redhat.com/show_bug.cgi?id=1410461 - http://www.securityfocus.com/bid/95179 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMag
/www.securityfocus.com/bid/95179 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/728dc6a600cf4cbdac846964c85cc04339db8ac1
CVE ID: CVE-2016-10054 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - http://www.securityfocus.com/bid/95191 - https://bugzilla.redhat.com/show_bug.cgi?id=1410462 - ht
ecurity/2016/12/26/9 - http://www.securityfocus.com/bid/95191 - https://bugzilla.redhat.com/show_bug.cgi?id=1410462 - https://github.com/ImageMagick/ImageMagick/commit/eedd0c35bb2d8af7aa05f215689fdebd11633fa1
CVE ID: CVE-2016-10055 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1 - https://bugzilla.redhat.com/show_bug.cgi?id=1410464 - http://www.securityfocus.com/bid/95193 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - ht
g.cgi?id=1410464 - http://www.securityfocus.com/bid/95193 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/eedd0c35bb2d8af7aa05f215689fdebd11633fa1
CVE ID: CVE-2016-10056 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1 - https://bugzilla.redhat.com/show_bug.cgi?id=1410465 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - http://www.securityfocus.com/bid/95190 - h
ug.cgi?id=1410465 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - http://www.securityfocus.com/bid/95190 - http://www.securityfocus.com/bid/95191 - https://github.com/ImageMagick/ImageMagick/commit/eedd0c35bb2d8af7aa05f215689fdebd11633fa1
CVE ID: CVE-2016-10057 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1 - https://bugzilla.redhat.com/show_bug.cgi?id=1410466 - http://www.securityfocus.com/bid/95192 - http://www.openwall.com/lists/oss-security/2016/12/26/9
w_bug.cgi?id=1410466 - http://www.securityfocus.com/bid/95192 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/eedd0c35bb2d8af7aa05f215689fdebd11633fa1
CVE ID: CVE-2016-10058 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service (memory consumption) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/4ec444f4eab88cf4bec664fafcf9cab50bc5ff6a - http://www.securityfocus.com/bid/95212 - https://bugzilla.redhat.com/show_bug.cgi?id=1410467 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/I
com/show_bug.cgi?id=1410467 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://github.com/ImageMagick/ImageMagick/commit/47e8e6ceef979327614d0b8f0c76c6ecb18e09cf
CVE ID: CVE-2016-10059 State: PUBLISHED Published: 2017-03-23T17:00:00 Last Updated: 2024-08-06T03:07:32.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95206 - https://bugzilla.redhat.com/show_bug.cgi?id=1410469 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html - https://github.com/ImageMagick/ImageMagick/commit/58cf5bf4fade82e3b510e8f3463a967278a3e410 - http://www.openwa
28.html - https://github.com/ImageMagick/ImageMagick/commit/58cf5bf4fade82e3b510e8f3463a967278a3e410 - http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE ID: CVE-2016-10060 State: PUBLISHED Published: 2017-03-02T21:00:00 Last Updated: 2024-08-06T03:07:32.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1410470 - http://www.securityfocus.com/bid/95208 - https://github.com/ImageMagick/ImageMagick/commit/933e96f01a8c889c7bf5ffd30020e86a02a046e7 - https://github.com/ImageMagick/Imag
github.com/ImageMagick/ImageMagick/commit/933e96f01a8c889c7bf5ffd30020e86a02a046e7 - https://github.com/ImageMagick/ImageMagick/issues/196 - http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE ID: CVE-2016-10061 State: PUBLISHED Published: 2017-03-03T17:00:00 Last Updated: 2024-08-06T03:07:32.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/4e914bbe371433f0590cefdf3bd5f3a5710069f9 - https://github.com/ImageMagick/ImageMagick/issues/196 - http://www.securityfocus.com/bid/95207 - https://bugzilla.redhat.com/show_bug.cgi?id=1410471
ck/ImageMagick/issues/196 - http://www.securityfocus.com/bid/95207 - https://bugzilla.redhat.com/show_bug.cgi?id=1410471 - http://www.openwall.com/lists/oss-security/2016/12/26/9
CVE ID: CVE-2016-10062 State: PUBLISHED Published: 2017-03-02T21:00:00 Last Updated: 2024-08-06T03:07:32.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95209 - http://www.debian.org/security/2017/dsa-3799 - https://github.com/ImageMagick/ImageMagick/issues/196 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://bugzilla.redhat.com/show_bug.cgi?id=1410
/issues/196 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - https://bugzilla.redhat.com/show_bug.cgi?id=1410473
CVE ID: CVE-2016-10063 State: PUBLISHED Published: 2017-03-02T21:00:00 Last Updated: 2024-08-06T03:07:32.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file, related to extend validity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1410476 - https://github.com/ImageMagick/ImageMagick/commit/2bb6941a2d557f26a2f2049ade466e118eeaab91 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - http://www.securityfocus.com/bid/95210 - htt
e466e118eeaab91 - http://www.openwall.com/lists/oss-security/2016/12/26/9 - http://www.securityfocus.com/bid/95210 - https://github.com/ImageMagick/ImageMagick/commit/94936efda8aa63563211eda07a5ade92abb32f7a