CAD Mini Viewer Memory Corruption Vulnerability

CAD Mini Viewer is a DWG viewing tool to quickly view DWG drawings out of AutoCAD. A memory corruption vulnerability exists in the CAD Mini Viewer tool when handling BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. Successful exploitation could result ...

CAD Mini Home Decor has a memory corruption vulnerability

CAD Mini Home is an interior design CAD software tools, support for WinXp, Win2003, WinVista, Win 7 and other systems. CAD Mini Home Furnishings tool has a memory corruption vulnerability when dealing with BMP images. An attacker can cause the program to crash by constructing a malformed BMP imag...

PT-2019-5847 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in coders/bmp.c, related to an integer overflow of the value. This could allow a remote attacker to cause a denial of service using a specially crafted file. T...

Amazon Linux 2 : optipng (ALAS-2019-1313)

The bmpreadrows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service invalid memory write and crash via a series of delta escapes in a crafted BMP image.CVE-2016-2191 C Tenable Network Security, Inc. The descriptive text and package checks i...

Medium: optipng

Issue Overview: The bmpreadrows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service invalid memory write and crash via a series of delta escapes in a crafted BMP image.CVE-2016-2191 Affected Packages: optipng Note: This advisory is applicab...

Fedora 31 : SDL (2019-f5558abfef)

This release fixes a heap buffer over-read in BlitNtoN function when processing an invalid BMP image. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2019-1955)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial ...

EulerOS 2.0 SP5 : libjpeg-turbo (EulerOS-SA-2019-1892)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c leads to denial of service CVE-2018-14498 Note tha...

Fedora 29 : SDL (2019-e08f78d4a6)

This release fixes a heap buffer over-read in BlitNtoN function when processing an invalid BMP image. It also updates a URL in the RPM metadata. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted t...

Fedora 30 : SDL (2019-446ca9f695)

This release fixes a heap buffer over-read in BlitNtoN function when processing an invalid BMP image. It also updates a URL in the RPM metadata. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted t...

MGASA-2019-0239 Updated sdl2 packages fix security vulnerabilities

Updated sdl2 packages fix security vulnerabilities This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. - Fix CVE-2019-7572 a buffer overread in IMAADPCMnibble rhbz1676754 - Fix CVE-2019-7572 a buffer overwrite in IMAADPCMnibble...

openSUSE: Security Advisory for SDL_image (openSUSE-SU-2019:2071-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : SDL2_image (openSUSE-2019-2070)

This update for SDL2image fixes the following issues : Update to new upstream release 2.0.5. Security issues fixed : - TALOS-2019-0820 CVE-2019-5051: exploitable heap-based buffer overflow vulnerability when loading a PCX file boo1140419 - TALOS-2019-0821 CVE-2019-5052: exploitable integer overfl...

Security update for SDL_image (moderate)

openSUSE Security Update: Security update for SDLimage Announcement ID: openSUSE-SU-2019:2071-1 Rating: moderate References: 1124827 1140421 1141844 1143763 1143764 1143766 1143768 Cross-References: CVE-2019-13616 CVE-2019-5052 CVE-2019-5057 CVE-2019-5058 CVE-2019-5059 CVE-2019-5060 CVE-2019-7635...

CVE-2019-13616

A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...

PT-2020-9627 · Sdl +3 · Sdl +3

Name of the Vulnerable Software and Affected Versions: SDL versions prior to 1.2.15 SDL versions 2.x prior to 2.0.9 Description: A heap-based buffer overflow flaw exists while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image. This issue...

USN-4109-1 openjpeg2 vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly remote code execution. CVE-2017-17480 It was discovered that OpenJPEG incorrectly handled certain files. An attacker could possibly use this...

USN-4109-1: OpenJPEG vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly remote code execution. CVE-2017-17480 It was discovered that OpenJPEG incorrectly handled certain files. An attacker could possibly use this...

Adobe Acrobat Pro DC AcroForm Bitmap File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

RHEL 7 : libjpeg-turbo (RHSA-2019:2052)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2052 advisory. The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessi...