PT-2016-5054

Name of the Vulnerable Software and Affected Versions OptiPNG versions prior to 0.7.6 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory write and crash. This is achieved through a series of delta escapes in a crafted BMP image, specifically...

PT-2016-1708

Name of the Vulnerable Software and Affected Versions OptiPNG versions prior to 0.7.6 Description The issue is caused by an off-by-one error in the bmp rle4 fread function, leading to a heap-based buffer overflow when processing a crafted image file. This can result in a denial of service, such a...

PT-2016-1709

Name of the Vulnerable Software and Affected Versions OptiPNG versions prior to 0.7.6 Description The issue is related to a heap-based buffer overflow in the bmp read rows function, which can be triggered by a crafted image file. This could allow remote attackers to cause a denial of service, suc...

Foxit Reader ConvertToPDF BMP Parsing Information Disclosure Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the ConvertToPDF plug-in, due to a constructed BMP graphic that triggers a read of memory outside of the allocated object. Exploitation of this vulnerability allows an attacker to execut...

PT-2016-5834

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 7.3.4 Description The issue allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted image, including JPEG, GIF, or BMP formats. This occurs when...

Foxit Reader ConvertToPDF BMP Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

GLSA-201603-10 : QtGui: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-10 QtGui: Multiple vulnerabilities Multiple buffer overflow vulnerabilities have been discovered in QtGui. It is possible for remote attackers to construct specially crafted BMP, ICO, or GIF images that lead to buffer...

QtGui: Multiple vulnerabilities

Background QtGui is the GUI module and platform plugins for the Qt framework Description Multiple buffer overflow vulnerabilities have been discovered in QtGui. It is possible for remote attackers to construct specially crafted BMP, ICO, or GIF images that lead to buffer overflows. After...

Fedora 23 : potrace-1.13-2.fc23 (2015-7852ea201b)

Fix issues with BMP files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

Fedora 22 : potrace-1.13-2.fc22 (2015-89ee6b7f82)

Fix issues with BMP files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

PictureTrails Photo Editor GE.exe 2.0.0 - .bmp Crash (PoC)

PictureTrails Photo Editor GE.exe 2.0.0 - .bmp Crash PoC Exploit Title: PictureTrail Photo Editor GE.exe 2.00 - ./bmp Crash PoC Date: 01-03-2016 Exploit Author: redknight99 Vendor Homepage: http://www.picturetrail.com/ Software Link: http://www.picturetrail.com/downloads/photoeditor200.exe Versio...

PictureTrails Photo Editor GE.exe 2.0.0 - '.bmp' Crash (PoC)

Exploit for windows platform in category dos / poc Exploit Title: PictureTrail Photo Editor GE.exe 2.00 - ./bmp Crash PoC Date: 01-03-2016 Exploit Author: redknight99 Vendor Homepage: http://www.picturetrail.com/ Software Link: http://www.picturetrail.com/downloads/photoeditor200.exe Version: 2.0...

PictureTrails Photo Editor GE.exe 2.0.0 - '.bmp' Crash (PoC)

Exploit Title: PictureTrail Photo Editor GE.exe 2.00 - ./bmp Crash PoC Date: 01-03-2016 Exploit Author: redknight99 Vendor Homepage: http://www.picturetrail.com/ Software Link: http://www.picturetrail.com/downloads/photoeditor200.exe Version: 2.0.0 Tested on: Windows 7, 10 CVE : Unknown Picture...

SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2016:0225-1)

This update for gdk-pixbuf fixes the following security issues : - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the precedin...

PT-2016-3809

Name of the Vulnerable Software and Affected Versions gdk-pixbuf version 2.30.x Description The issue is related to a heap-based buffer overflow in the gdk pixbuf flip function, which can be triggered by a crafted BMP file. This could lead to a denial of service or potentially allow the execution...

Foxit Reader ConvertToPDF Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDFx86.dll...

CVE-2015-8668

Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image...

Heap overflow

Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image...

CVE-2015-8668

Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image...

CVE-2015-8668

Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image...