39 matches found
Huawei EulerOS: Security Advisory for libpng (EulerOS-SA-2019-2383)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libpng (EulerOS-SA-2019-2247)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : libpng (EulerOS-SA-2019-2383)
According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to caus...
EulerOS 2.0 SP5 : libpng (EulerOS-SA-2019-1975)
According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to caus...
CVE-2019-7353
CVE-2019-7353 affects GitLab Community and Enterprise Edition 11.7.x before 11.7.4. The issue is an incorrect access control that permits an unauthorized user to view confidential issue and merge request titles from other projects, exposing project-level confidentiality (not necessarily code or c...
CVE-2019-6728
The CVE-2019-6728 issue affects Foxit Reader (PDF processing path) and is due to an out-of-bounds read caused by inadequate validation of user-supplied data, resulting in a read past the end of an allocated buffer. This vulnerability can disclose sensitive information and, in conjunction with oth...
CVE-2019-6728
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2016-7353
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...
CVE-2016-7353
CVE-2016-7353 entry is rejected/not used and does not represent an active vulnerability.
Mandriva Linux Security Advisory : libpng12 (MDVSA-2015:071)
Updated libpng12 package fixes security vulnerabilities : The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a PLTE chunk of zero bytes or a NULL palette, related to pngrtran.c and pngset.c...
CVE-2014-7353
The CVE-2014-7353 entry concerns the JAZAN 24 Android app (com.jazan24.Mcreda) version 1.0 that fails to verify SSL X.509 certificates. The root cause is improper certificate validation, enabling man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certific...
Fedora Update for mingw-libpng FEDORA-2014-6892
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Linux Security Advisory : libpng (MDVSA-2014:084)
Updated libpng packages fix security vulnerabilities : An integer overflow leading to a heap-based buffer overflow was found in the pngsetsPLT and pngsettext2 API functions of libpng. An attacker could create a specially crafted image file and render it with an application written to explicitly...
Updated libpng packages fix two security vulnerabilities
Updated libpng12 packages fix security vulnerabilities: An integer overflow leading to a heap-based buffer overflow was found in the pngsetsPLT and pngsettext2 API functions of libpng. An attacker could create a specially-crafted image file and render it with an application written to explicitly...
Updated libpng packages fix two security vulnerabilities
Updated libpng12 and libpng packages fix security vulnerabilities: An integer overflow leading to a heap-based buffer overflow was found in the pngsetsPLT and pngsettext2 API functions of libpng. An attacker could create a specially-crafted image file and render it with an application written to...
CVE-2013-7353
Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service segmentation fault and crash via a crafted image, which triggers a heap-based buffer overflow...
CVE-2013-7353
CVE-2013-7353 corresponds to an integer overflow in the libpng function png_set_unknown_chunks (libpng/pngset.c) in libpng before 1.5.14beta08, enabling context-dependent attackers to trigger a denial of service (segmentation fault/crash) via a crafted image, due to a heap-based buffer overflow. ...