| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-3718 | 4.3 |
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
|
12-02-2023 - 23:20 | 05-05-2016 - 18:59 | |
| CVE-2016-3717 | 7.1 |
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
|
12-02-2023 - 23:20 | 05-05-2016 - 18:59 | |
| CVE-2016-3716 | 4.3 |
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
|
12-02-2023 - 23:20 | 05-05-2016 - 18:59 | |
| CVE-2016-3714 | 10.0 |
The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka "I
|
12-02-2023 - 23:19 | 05-05-2016 - 18:59 | |
| CVE-2016-3715 | 5.8 |
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
|
12-02-2023 - 23:19 | 05-05-2016 - 18:59 | |
| CVE-2016-7799 | 4.3 |
MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
|
28-04-2021 - 19:25 | 18-01-2017 - 17:59 | |
| CVE-2016-5842 | 5.0 |
MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.
|
28-04-2021 - 16:33 | 13-12-2016 - 15:59 | |
| CVE-2016-7906 | 4.3 |
magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.
|
14-10-2020 - 18:16 | 18-01-2017 - 17:59 | |
| CVE-2016-6491 | 6.8 |
Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.
|
01-07-2017 - 01:30 | 13-12-2016 - 15:59 | |
| CVE-2016-5010 | 4.3 |
coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file.
|
01-07-2017 - 01:29 | 20-04-2017 - 18:59 |