Important: Red Hat Security Advisory: ghostscript security and bug fix update

An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

FreeRDP Buffer Overflow Vulnerability (CNVD-2019-00652)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. A heap buffer overflow vulnerability exists in the 'updatereadbitmapupdate' function in versions of FreeRDP prior to 2.0.0-rc4, which can be exploited by a remote attacker to cause a...

FreeRDP Buffer Overflow Vulnerability

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. A heap buffer overflow vulnerability exists in the 'gdiBitmapDecompress' function in versions prior to FreeRDP 2.0.0-rc4, which can be exploited by a remote attacker to cause a denial o...

DEBIAN-CVE-2018-8787

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...

CVE-2018-8787

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...

UBUNTU-CVE-2018-8787

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdiBitmapDecompress and results in a memory corruption and probably even a remote code execution...

OMRON CX-Supervisor PAG Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader and Foxit PhantomPDF for Windows Out-of-Bounds Read Vulnerability (CNVD-2018-23237)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. An out-of-bounds read vulnerability exists in the processing of BMP images in Foxit Reader 9.2.0.9297 and earlier versions and Foxi...

DEBIAN-CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

PT-2018-3706 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8 through 7.0.13 Description: The issue is related to an infinite loop in the ReadBMPImage function of the coders/bmp.c file. This allows a remote attacker to cause a denial of service using a specially crafted bmp...

Google PDFium JBIG2 image ComposeToOpt2WithRect information disclosure vulnerability

Summary An exploitable out-of-bounds read on the heap vulnerability exists in the JBIG2 parsing code of Google Chrome version 67.0.3396.99. A specially crafted PDF document can trigger an out-of-bounds read, which can possibly lead to an information leak that could be used as part of an exploit. ...

Denial of Service Vulnerability in Bandizip

Bandizip is a compressed package processing tool. A denial of service vulnerability exists in Bandizip. An attacker can exploit the vulnerability to process malformed zip archives malformed BMP images inside the archive which can cause the program to crash, and if successfully exploited can lead ...

wernsey/bitmap denial of service vulnerability

wernsey/bitmap is a library for manipulating bitmaps in memory and on disk. A denial of service vulnerability exists in versions of wernsey/bitmap prior to 2018-08-18, which can be exploited by an attacker to cause a denial of service null pointer backreference with the help of a 4-bit image...

CVE-2018-17073

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

Null pointer dereference

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

CVE-2018-17073

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

CVE-2018-17073

wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image...

CVE-2018-17073

CVE-2018-17073 concerns wernsey/bitmap prior to 2018-08-18, where processing a 4-bit image can trigger a NULL pointer dereference (denial of service). The CNVD/NVD entries confirm a NULL pointer backreference vulnerability in the library used for in-memory and disk bitmap manipulation. Impact is ...

Socusoft Photo To Video Converter Handles BMP with Memory Corruption Vulnerability

Socusoft Photo To Video Converter is a free slideshow maker that converts a bunch of photos into one video file. Socusoft Photo To Video Converter handles BMP with a memory corruption vulnerability that can be exploited by attackers to cause the program to crash by constructing malformed BMP imag...

Microsoft Windows NtGdiClearBitmapAttributes Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing a...