UBUNTU-CVE-2017-12693

The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted BMP file...

OpenJPEG integer overflow vulnerability (CNVD-2017-243227)

OpenJPEG is a C-based open source JPEG 2000 codec . An integer overflow vulnerability exists in the 'bmp24toimage' function of the convertbmp.c file in versions of OpenJPEG prior to 2.2.0. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read...

DEBIAN-CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

DEBIAN-CVE-2016-10504

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

CVE-2017-13673

An assert failure issue was found in the VGA display emulator built into the Quick emulator QEMU. It could occur while updating graphics display, due to miscalculating region for dirty bitmap snapshot in split screen mode. A privileged user/process inside guest could use this flaw to crash the QE...

OpenJPEG Heap Overflow Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A heap overflow vulnerability exists in the opjcompress component of OpenJPEG, which could be exploited by a remote attacker to conduct a denial of service attack or remotely execute arbitrary code by constructing a specially crafted BMP image...

DEBIAN-CVE-2017-13673

The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service assertion failure in the cpuphysicalmemorysnapshotgetdirty function...

CVE-2017-13673

The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service assertion failure in the cpuphysicalmemorysnapshotgetdirty function...

CVE-2017-13673

CVE-2017-13673 affects QEMU’s VGA display path used by QEMU/KVM. The flaw arises from a miscalculation of the region for the dirty bitmap snapshot during split-screen display, which can trigger an assertion failure in cpu_physical_memory_snapshot_get_dirty and cause a denial of service. The issue...

CVE-2017-13673

The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service assertion failure in the cpuphysicalmemorysnapshotgetdirty function...

CentOS 7 : ghostscript (CESA-2017:2180)

An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ghostscript security update

CentOS Errata and Security Advisory CESA-2017:2180 An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

OpenJPEG Denial of Service Vulnerability (CNVD-2017-28761)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'bmpreadinfoheader' function in bin/jp2/convertbmp.c in OpenJPEG version 2.2.0, which originates from the program receiving a packet header with a biBitCount of zero. A remote attacker could use this...

UBUNTU-CVE-2017-12982

The bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service memory allocation failure in the opjimagecreate function in lib/openjp2/image.c, related to the opjalignedallocn...

minidjvu denial of service vulnerability (CNVD-2017-25770)

minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the mdjvubitmapgetboundingbox function in base/4bitmap.c in...

minidjvu denial of service vulnerability

minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. A denial of service vulnerability exists in the JB2BitmapCoder::coderowbyrefinement function in...

minidjvu denial of service vulnerability (CNVD-2017-25769)

minidjvu is a command-line utility for encoding and decoding single-page black-and-white DjVu files with the ability to compress multiple pages, taking advantage of similarities between pages. The mdjvubitmappackrow function denial of service vulnerability in base/4bitmap.c in Minidjvu allows an...

DEBIAN-CVE-2017-12445

The JB2BitmapCoder::coderowbyrefinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

DEBIAN-CVE-2017-12443

The mdjvubitmappackrow function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service invalid memory read and application crash via a crafted djvu file...

[SECURITY] Fedora 25 Update: potrace-1.15-1.fc25

Potrace is a utility for tracing a bitmap, which means, transforming a bitm ap into a smooth, scalable image. The input is a bitmap PBM, PGM, PPM, or BMP format, and the default output is an encapsulated PostScript file EPS. A typical use is to create EPS files from scanned data, such as company ...