Scientific Linux Security Update : gimp on SL7.x x86_64 (20161103)

The following packages have been upgraded to a newer upstream version: gimp 2.8.16, gimp-help 2.8.2. Security Fixes : - Multiple use-after-free vulnerabilities were found in GIMP in the channel and layer properties parsing process when loading XCF files. An attacker could create a specially craft...

CentOS 7 : gimp / gimp-help (CESA-2016:2589)

An update for gimp and gimp-help is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

SUSE SLED12 Security Update : gimp (SUSE-SU-2016:1962-1)

gimp was updated to fix one security issue. This security issue was fixed : - CVE-2016-4994: Use-after-free vulnerabilities in the channel and layer properties parsing process bsc986021. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE securi...

SUSE-SU-2016:1962-1 Security update for gimp

gimp was updated to fix one security issue. This security issue was fixed: - CVE-2016-4994: Use-after-free vulnerabilities in the channel and layer properties parsing process bsc986021...

SUSE-SU-2016:1827-1 Security update for gimp

gimp was updated to fix one security issue. This security issue was fixed: - CVE-2016-4994: Use-after-free vulnerabilities in the channel and layer properties parsing process bsc986021...

Fedora 23 : 2:gimp (2016-20db5e796b)

Security fix for CVE-2016-4994 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

CVE-2016-4994

CVE-2016-4994 is a Use‑after‑free vulnerability in GIMP’s XCF file loader (function xcf_load_image in app/xcf/xcf-load.c). An attacker could craft an XCF file to crash GIMP or potentially execute arbitrary code. Public discussions and advisories indicate multiple use‑after‑free bugs in the channe...

MGASA-2016-0241 Updated gimp packages fix security vulnerability

It was discovered that there was a use-after-free vulnerability in the channel and layer properties parsing process in GIMP CVE-2016-4994...

openSUSE Security Update : gimp (openSUSE-2016-822)

gimp was updated to version 2.8.16 to fix one security issue. This security issue was fixed : - CVE-2016-4994: Use-after-free vulnerabilities in the channel and layer properties parsing process bsc986021. This non-security issues were fixed : - Core : - Seek much less when writing XCF - Don't see...

CVE-2016-4994

Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...

CVE-2012-4994

The CVE-2012-4994 entry concerns a SQL injection in LimeSurvey’s admin/admin.php. Affected software is LimeSurvey prior to 1.91+ Build 120224, where remote authenticated users can inject SQL commands via the id parameter in a browse action. The vulnerability arises from improper sanitization of u...

CVE-2010-4994

SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the detailedresults parameter to searchjobs.html...

CVE-2010-4994

SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the detailedresults parameter to searchjobs.html...

CVE-2010-4994

The CVE-2010-4994 entry describes a SQL injection in the Joomla! Jobs Pro component version 1.6.4. The vulnerability affects the detailed_results parameter to search_jobs.html, enabling remote attackers to execute arbitrary SQL commands. This is the root cause: unsafely handled input leading to S...

AutoPlay 1.33 Buffer Overflow

!/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini files that can be edited and stored to compact disks...

AutoPlay v1.33 (autoplay.ini) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini...

CVE-2009-4994

Cross-site scripting XSS vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2009-4994

SmarterTools SmarterTrack is affected by an XSS vulnerability (CVE-2009-4994) in frmKBSearch.aspx, exploitable before version 4.0.3504. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter, with no authentication required and no confidentiality loss sp...

CVE-2008-4994

The CVE-2008-4994 entry concerns the xmcd 2.6 package where the (1) ncsarmt and (2) ncsawrap scripts can be exploited by a local attacker to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid file. This vulnerability arises from insecure temporary file handling in xmcd component...

CVE-2007-4994

CVE-2007-4994 affects Red Hat Certificate System (RHCS) where new revocations generated during CRL creation could cause revoked certificates to be omitted from the CRL, enabling a bypass of revocation for some certificates. Supported by Red Hat advisories (RHSA-2007:0934; RHSA-2008:0566) and rela...