CVE-2016-8885

The bmpgetdata function in libjasper/bmp/bmpdec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service NULL pointer dereference by calling the imginfo command with a crafted BMP image...

BGP Swiss Army Knife: ExaBGP

ExaBGP provides a convenient way to implement Software Defined Networking by transforming BGP messages into friendly plain text or JSON, which can then be easily handled by simple scripts or your BSS/OSS. It is routinely used to improve service resilience and provide protection against network or...

VideoPad Video Editor Handles BMP Format with Memory Corruption Vulnerability

VideoPad Video Editor is an image processing tool. A memory corruption vulnerability exists in VideoPad Video Editor when processing BMP format images. The vulnerability allows an attacker to cause a program crash by constructing a malformed BMP format, which if successfully exploited, can lead t...

Updated potrace packages fix security vulnerability

The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted BMP image. CVE-2016-8685 The bmnew function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image,...

MGASA-2017-0073 Updated potrace packages fix security vulnerability

The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted BMP image. CVE-2016-8685 The bmnew function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image,...

CVE-2017-5867

ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...

CVE-2017-5867

ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...

CVE-2017-5867

ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...

Design/Logic Flaw

ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...

CVE-2017-5867

ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...

CVE-2017-5867

ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...

PT-2017-16720

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 8.1.11 ownCloud Server versions 8.2.x prior to 8.2.9 ownCloud Server versions 9.0.x prior to 9.0.7 ownCloud Server versions 9.1.x prior to 9.1.3 Description The issue allows remote authenticated users to cause...

CVE-2017-5867: Uncontrolled Resource Consumption

ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service server hang and logfile flooding via a one bit BMP file...

Design/Logic Flaw

FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section...

CVE-2017-6078

FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section...

CVE-2017-6078

FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section...

CVE-2017-6078

CVE-2017-6078 affects FastStone MaxView 3.0 and 3.1. The vulnerability arises from processing a BMP image with a crafted biSize field in the BITMAPINFOHEADER, leading to a denial of service (application crash). Exploitation requires user involvement (user-assisted). The issue is documented across...

PT-2017-16882

Name of the Vulnerable Software and Affected Versions FastStone MaxView versions 3.0 through 3.1 Description The issue allows user-assisted attackers to cause a denial of service, resulting in an application crash. This can be achieved via a malformed BMP image with a crafted biSize field in the...

CVE-2017-6078: Improper Input Validation

FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section...

The vulnerability of the LibTIFF library, which allows a hacker to cause an unexpected termination of the application

The vulnerability of the tifpackbits.c function in the LibTIFF library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application by using a specially created BMP...