PT-2018-3224 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.27 Description: The issue is related to an infinite loop in the ReadBMPImage function, which can cause an application hang. This can be exploited by remote attackers to cause a denial of service via a crafted image...

PT-2018-2956

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.3.0 Description The issue is related to an integer overflow in the opj t1 encode cblks function, located in openjp2/t1.c. This can be exploited by remote attackers to cause a denial of service using a crafted bmp file...

openSUSE Security Update : gdk-pixbuf (openSUSE-2017-1426)

This update for gdk-pixbuf provides the following fixes : - Add overflow checks when creating pixbuf structures in general - Fix arithmetic overflow in the BMP loader bsc1053417 - Adds support for BMPv3 with bitmasks bsc1053417 This update was imported from the SUSE:SLE-12-SP2:Update update...

SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2017:3441-1)

This update for gdk-pixbuf provides the following fixes : - Add overflow checks when creating pixbuf structures in general - Fix arithmetic overflow in the BMP loader bsc1053417 - Adds support for BMPv3 with bitmasks bsc1053417 Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2017:3441-1 Security update for gdk-pixbuf

This update for gdk-pixbuf provides the following fixes: - Add overflow checks when creating pixbuf structures in general - Fix arithmetic overflow in the BMP loader bsc1053417 - Adds support for BMPv3 with bitmasks bsc1053417...

PT-2017-19396

Name of the Vulnerable Software and Affected Versions gdk-pixbuf affected versions not specified Description The issue concerns arithmetic overflow in the BMP loader of gdk-pixbuf. It has been fixed by adding overflow checks when creating pixbuf structures in general and by fixing the arithmetic...

OpenJPEG -- integer overflow

NVD reports: In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opjt1encodecblks function openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

PhotoZoom Classic 7 Handles BMP with Denial of Service Vulnerability

PhotoZoom Classic 7 is a photo manipulation tool. A denial of service vulnerability exists in PhotoZoom Classic 7 when processing BMP format, which can be exploited to cause a program crash by constructing a malformed BMP image, and can be successfully exploited to cause arbitrary code execution...

PhotoZoom Pro 7 Handles BMP with Denial of Service Vulnerability

PhotoZoom Pro 7 is an image processing tool. PhotoZoom Pro 7 suffers from a denial of service vulnerability when handling the BMP format, which can be exploited to cause the program to crash by constructing a malformed BMP image, and can be successfully exploited to cause arbitrary code execution...

SRC-2018-0009 : Foxit Reader BMP Image Parsing BITMAPINFOHEADER biWidth Integer Overflow Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Memory Corruption Vulnerability in EximiousSoft GIF Creator v7.31 Processing BMP Images (CNVD-2017-36511)

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the BMP format. An attacker can cause the program to crash by constructing a malformed BMP image...

PT-2017-11859

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2017.012.20098 and earlier Adobe Acrobat and Reader versions 2017.011.30066 and earlier Adobe Acrobat and Reader versions 2015.006.30355 and earlier Adobe Acrobat and Reader versions 11.0.22 and earlier...

sam2p integer overflow vulnerability (CNVD-2017-36354)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. An integer overflow vulnerability exists in input-bmp.ci in the ReadImage function in sam2p version 0.49.4, for which there is currently no detailed...

Memory Corruption Vulnerability in SunlitGreen Photo Editor's BMP Handling

SunlitGreen Photo Editor is a document format editing tool. A memory corruption vulnerability exists in SunlitGreen Photo Editor when processing BMP images. An attacker could cause the program to crash or lead to arbitrary code execution by constructing malformed BMP format images...

OpenJPEG: Multiple vulnerabilities

Background OpenJPEG is an open-source JPEG 2000 library. Description Multiple vulnerabilities have been discovered in OpenJPEG. Please review the references below for details. Impact A remote attacker, via a crafted BMP, PDF, or j2k document, could execute arbitrary code, cause a Denial of Servic...

Apple Core Graphics BMP Framework img_decode_read Remote Code Execution Vulnerability(CVE-2016-4637)

SUMMARY An exploitable out of bounds write exists in the handling of BMP images on Apple OS X and iOS. A crafted BMP document can lead to an out of bounds write resulting in remote code execution. Vulnerability can be triggered via a saved BMP file delivered by other means when opened in any...

Oracle OIT ImageExport libvs_bmp BMP BI_RLE8 Width Code Execution Vulnerability(CVE-2016-3596)

Description When parsing a specially crafted BMP file, an erroneous memory copy operation can cause a heap buffer overflow leading to arbitrary code execution. Tested Versions Oracle Outside In Technology Content Access SDK 8.5.1. Product URLs...

The vulnerability of the ReadBMPImage function (coders/bmp.c) in the console-based image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the ReadBMPImage function coder/bmp.c in the console-based graphic editor ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory consumption through a specially created B...

CVE-2017-12693

The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted BMP file...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The attacks can be launched because the ReadBMPImage function in coders/bmp.c does not properly handle malicious BMP files, causing memory consumption...