Medium: ImageMagick

Issue Overview: A buffer overflow flaw was found in the way ImageMagick handled PSD images that use RLE encoding. An attacker could create a malicious PSD image file that, when opened in ImageMagick, would cause ImageMagick to crash or, potentially, execute arbitrary code with the privileges of t...

Fedora 20 : ImageMagick-6.8.6.3-4.fc20 (2014-4969)

Build 6.8.6-3 version because soname bump happened in newer. - Concretize soname versioning. - Add Patch0: ImageMagick-6.8.7-psd-CVE.patch CVE bug fix backporting: http://www.imagemagick.org/discourse-server/viewtopic. php?f=3&t=25128&sid=ff40ad66b1f845c767aa77c7e32f9f9c&p =109901p109901 for fix...

[SECURITY] [DSA 2898-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2897-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 09, 2014 http://www.debian.org/security/faq -...

ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)

ImageMagick 6.8.8-4 - Local Buffer Overflow SEH !/usr/bin/perl Exploit Title: ImageMagick 6.8.8-5 - Local Buffer Overflow SEH Date: 2-13-2014 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ImageMagick all versions prior to 6.8.8-5 Software Link:...

ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)

!/usr/bin/perl Exploit Title: ImageMagick 6.8.8-5 - Local Buffer Overflow SEH Date: 2-13-2014 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ImageMagick all versions prior to 6.8.8-5 Software Link: http://ftp.sunet.se/pub/multimedia/graphics/ImageMagick/binaries/ Versio...

Ubuntu Update for linux-lts-quantal USN-1947-1

Check for the Version of linux-lts-quantal OpenVAS Vulnerability Test $Id: gbubuntuUSN19471.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for linux-lts-quantal USN-1947-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

Oracle Linux 5 : tomcat (ELSA-2008-0648)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0648 advisory. - add patch for CVE-2008-1232 Resolves: rhbz457727 - add patch for CVE-2008-1947 Resolves: rhbz449916 - add patch for CVE-2008-2370 Resolves: rhbz45863...

CVE-2013-1947

kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to 1 document.rb, 2 video.rb, or 3 videoimage.rb...

CVE-2013-1947

CVE-2013-1947 concerns the kelredd-pruview Ruby gem (version 0.3.8) where a flaw in /lib/pruview/document.rb (and related code handling document.rb, video.rb, and video_image.rb) allows a context-dependent attacker to execute arbitrary commands via shell metacharacters injected into a filename ar...

RubyGems kelredd-pruview多个远程命令注入漏洞

BUGTRAQ ID: 59023 CVECAN ID: CVE-2013-1947 RubyGems kelredd-pruview是一个可以生成多种文件的缩略图的软件。 kelredd-pruview 0.3.0没有过滤用户输入内的shell元字符，如果文件名内包含特殊字符，那么就可以本地用户权限执行任意命令。 0 rubygems kelredd-pruview 0.3.0 厂商补丁： rubygems -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Slackware Advisory SSA:2011-171-01 fetchmail

The remote host is missing an update as announced via advisory SSA:2011-171-01. OpenVAS Vulnerability Test $Id: esoftslkssa201117101.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-171-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2489-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2488-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2488-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 2488-1. OpenVAS Vulnerability Test $Id: deb24881.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2488-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2489-1 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 2489-1. OpenVAS Vulnerability Test $Id: deb24891.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2489-1 iceape Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Mandriva Update for mozilla MDVSA-2012:088 (mozilla)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mozilla MDVSA-2012:088 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2012:088 mozilla Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Scientific Linux Security Update : tomcat on SL5.x i386/x86_64

A cross-site scripting vulnerability was discovered in the HttpServletResponse.sendError method. A remote attacker could inject arbitrary web script or HTML via forged HTTP headers. CVE-2008-1232 An additional cross-site scripting vulnerability was discovered in the host manager application. A...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20120606)

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2011-3101,...

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20120605)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...