Vulnerabilities > Missing Release of Resource after Effective Lifetime

DATE CVE VULNERABILITY TITLE RISK
2017-06-22 CVE-2017-9815 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to cause a denial of service (memory leak within the function _TIFFmalloc in tif_unix.c) via a crafted file.
network
low complexity
libtiff canonical CWE-772
6.5
2017-06-05 CVE-2017-9440 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.55
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
2017-06-05 CVE-2017-9439 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.55
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
2017-06-02 CVE-2017-9409 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.55
In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
2017-06-02 CVE-2017-9408 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
freedesktop debian CWE-772
6.5
2017-06-02 CVE-2017-9407 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.55
In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
2017-06-02 CVE-2017-9406 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
freedesktop debian CWE-772
6.5
2017-06-02 CVE-2017-9405 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.55
In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
2017-06-02 CVE-2017-9404 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
libtiff debian canonical CWE-772
6.5
2017-06-02 CVE-2017-9403 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
libtiff debian canonical CWE-772
6.5