Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-03-20 CVE-2014-9846 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
network
low complexity
opensuse-project suse opensuse canonical imagemagick CWE-119
critical
9.8
2017-03-20 CVE-2014-9845 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
5.5
2017-03-20 CVE-2014-9844 Out-of-bounds Read vulnerability in multiple products
The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.
5.5
2017-03-20 CVE-2014-9843 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
network
low complexity
opensuse-project opensuse canonical imagemagick CWE-119
critical
9.8
2017-03-20 CVE-2014-9842 Resource Exhaustion vulnerability in multiple products
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
7.5
2017-03-20 CVE-2014-9841 7PK - Errors vulnerability in multiple products
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."
network
low complexity
opensuse-project opensuse canonical imagemagick CWE-388
critical
9.8
2017-03-20 CVE-2012-5361 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Ffmpeg
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.
local
low complexity
ffmpeg CWE-119
7.8
2017-03-20 CVE-2017-7187 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Linux Kernel
The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.
local
low complexity
linux CWE-119
7.8
2017-03-20 CVE-2017-7186 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Pcre and Pcre2
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup.
network
low complexity
pcre CWE-119
7.5
2017-03-20 CVE-2014-9938 Improper Encoding or Escaping of Output vulnerability in Git-Scm GIT
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.
network
low complexity
git-scm CWE-116
8.8