CVE-2018-19389

FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service Break instruction exception and application crash via BMP data because of a ConvertToPDFx86!ConnectedPDF::ConnectedPDFSDK::FCPSendEmailNotification issue...

Updated sdl2/mingw-SDL2 packages fix security vulnerabilities

This update fixes various security vulnerabilities affecting the SDL2image library, listed below. The fixes are provided in SDL2image 2.0.4, which depends on SDL2 2.0.8 or later. As such, the SDL2 and SDL2mixer libraries are also updated to their current stable releases, providing various bug fix...

SUSE-SU-2018:3753-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069 - CVE-2018-18016: Fixed a memory...

SUSE-SU-2018:3657-1 Security update for SDL_image

This update for SDLimage fixes the following issues: - CVE-2017-14442: A specially crafted BMP image could have caused a stack overflow for an attacker that can display a specially crafted image bsc1084304. - CVE-2017-14450: A specially crafted GIF image could have caused a buffer overflow on a...

MGASA-2018-0438 Updated cimg and gmic packages fix security vulnerabilities

Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h CVE-2018-7587. An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp i...

Updated cimg and gmic packages fix security vulnerabilities

Updated cimg and gmic packages fix security vulnerabilities: An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h CVE-2018-7587. An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp i...

Denial Of Service (DoS)

libautotrace.so is vulnerable to denial of service. An attacker is able to cause a denial of service condition via a crafted bmp image file by exploiting a heap-based buffer overflow vulnerability in pstoeditsuffixtableinit function in output-pstoedit.c...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-1183)

This update for GraphicsMagick fixes the following issues : - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069 %NASLMINLEVEL 70300 C...

Debian DSA-4316-1 : imagemagick - security update

This update fixes several vulnerabilities in Imagemagick, a graphical software suite. Various memory handling problems or incomplete input sanitising have been found in the coders for BMP, DIB, PICT, DCM, CUT and PSD. C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Foxit Reader ConvertToPDF BMP File Parsing Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

ImageMagick Denial of Service Vulnerability (CNVD-2018-20677)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'ReadBMPImage' function of the coders/bmp.c file in ImageMagick version 7.0.8-1...

NULL Pointer Dereference

libjasper.so is vulnerable to denial of service. A NULL pointer dereference in the bmpgetdata function in libjasper/bmp/bmpdec.c allows remote attackers to cause a denial of service condition by calling the imginfo command with a crafted BMP image. This vulnerability exists due to an incomplete f...

NULL Pointer Dereference

libjasper.so is vulnerable to denial of service. A NULL pointer dereference in the bmpgetdata function in libjasper/bmp/bmpdec.c allows remote attackers to cause a denial of service condition by calling the imginfo command with a crafted BMP image...

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

CVE-2018-18024

CVE-2018-18024 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

UBUNTU-CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...