CVE-2015-8572: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Autodesk Design Review ADR before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a 1 BMP or 2 FLI file, 3 encoded scan lines in a PCX file, or 4 DataSubBlock or 5 GlobalColorTable in a GIF file...

CVE-2015-8571: Undefined Security Weakness

Integer overflow in Autodesk Design Review ADR before 2013 Hotfix 2 allows remote attackers to execute arbitrary code via a crafted biClrUsed value in a BMP file, which triggers a buffer overflow...

PT-2015-3023

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions prior to 2013 Hotfix 2 Description The issue is caused by an integer overflow in Autodesk Design Review. Exploitation of this issue may allow a remote attacker to execute arbitrary code by using a specially...

Autodesk Design Review BMP RLE Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2015-3024

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions prior to 2013 Hotfix 2 Description The issue is caused by multiple buffer overflows in Autodesk Design Review, allowing remote attackers to execute arbitrary code. This can be achieved via crafted RLE data in BM...

Autodesk Design Review BMP biClrUsed Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2015-7897

The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service memory corruption via a crafted BMP image file...

CVE-2015-7897

The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service memory corruption via a crafted BMP image file...

CVE-2015-7897: Improper Restriction of Operations within the Bounds of a Memory Buffer

The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service memory corruption via a crafted BMP image file...

PT-2015-7656

Name of the Vulnerable Software and Affected Versions Android media process in Samsung Galaxy S6 Edge before version G925VVRU4B0G9 Description The issue concerns the media scanning functionality in the face recognition library, which can be exploited by remote attackers. This can be achieved...

PT-2017-9742

Name of the Vulnerable Software and Affected Versions potrace versions prior to 1.13 Description The issue in the bm readbody bmp function in bitmap io.c allows remote attackers to cause a denial of service NULL pointer reference and crash through a manipulated BMP image. Recommendations For...

PT-2017-9744

Name of the Vulnerable Software and Affected Versions potrace versions prior to 1.13 Description The issue in the bm readbody bmp function in bitmap io.c allows remote attackers to cause a denial of service NULL pointer reference and crash through a manipulated BMP image. Recommendations For...

PT-2017-9743

Name of the Vulnerable Software and Affected Versions potrace versions prior to 1.13 Description The issue in the bm readbody bmp function in bitmap io.c allows remote attackers to cause a denial of service NULL pointer reference and crash through a manipulated BMP image. Recommendations For...

PT-2017-9733

Name of the Vulnerable Software and Affected Versions potrace version 1.13 Description The issue allows remote attackers to cause a denial of service, resulting in invalid memory access and a crash, by providing a crafted BMP image. This is due to a problem in the findnext function in decompose.c...

Scientific Linux Security Update : libwmf on SL6.x, SL7.x i386/x86_64 (20151020)

It was discovered that libwmf did not correctly process certain WMF Windows Metafiles with embedded BMP images. By tricking a victim into opening a specially crafted WMF file in an application using libwmf, a remote attacker could possibly use this flaw to execute arbitrary code with the privileg...

libwmf: heap overflow when decoding BMP images

It was discovered that libwmf did not correctly process certain WMF Windows Metafiles containing BMP images. By tricking a victim into opening a specially crafted WMF file in an application using libwmf, a remote attacker could possibly use this flaw to execute arbitrary code with the privileges ...

USN-2722-1 GDK-PixBuf Vulnerabilities | Cloud Foundry

USN-2722-1 GDK-PixBuf Vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected libgdk-pixbuf2.0-0 2.30.7-0ubuntu1.1 Description It was discovered that GDK-PixBuf incorrectly handled scaling bitmap images. If a user or automated system were tricked into opening a BMP image file, a remote...

IBM Lotus Domino BMP Parsing Integer Overflow (CVE-2015-1902)

An integer overflow vulnerability has been reported in IBM Lotus Domino. The vulnerability is due to improper bounds checking when parsing a BMP image with crafted dimensions. This could potentially lead to an undersized buffer being allocated. A remote, unauthenticated attacker can exploit this...

gdk security update

CentOS Errata and Security Advisory CESA-2015:1694 Updated gdk-pixbuf2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base...

Moderate: Red Hat Security Advisory: gdk-pixbuf2 security update

Updated gdk-pixbuf2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...