2660 matches found
OpenJPEG integer overflow vulnerability (CNVD-2018-04305)
OpenJPEG is an open source JPEG 2000 codec written in C language. An integer overflow vulnerability exists in OpenJPEG 2.3.0. The vulnerability arises due to an out-of-bounds left shift in the opjj2ksetupencoder function openjp2/j2k.c. A remote attacker could exploit this vulnerability via a...
OpenJPEG integer overflow vulnerability (CNVD-2018-04193)
OpenJPEG is a C-based open source JPEG 2000 codec . An integer overflow vulnerability exists in the 'opjt1encodecblks' function in the openjp2/t1.c file in OpenJPEG version 2.3.0. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted bmp file...
UBUNTU-CVE-2018-5727
In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opjt1encodecblks function openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...
DEBIAN-CVE-2018-5685
In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...
UBUNTU-CVE-2018-5685
In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...
CVE-2017-13199
In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-13199
In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...
Blender Sequencer imb_bmp_decode Integer Overflow Vulnerability
Blender is an open source cross-platform all-in-one 3D animation software, providing a series of animated short film production solutions from modeling, animation, materials, rendering, to audio processing, video editing and so on. Blender Sequencer imbbmpdecode has an integer overflow...
Memory Corruption Vulnerability in 2345 Viewer V9.0
2345 Viewer is one of the fastest and most format-compatible high-definition image viewing software. A memory corruption vulnerability exists in 2345 Viewer V9.0 when parsing the BMP file format, which allows an attacker to construct a malicious BMP image file to trigger a memory corruption,...
CVE-2017-16407
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer;...
CVE-2017-11213
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized...
UBUNTU-CVE-2017-11213
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized...
PT-2018-11598 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.15 is not specified, however, the issue is in versions through 4.14. Description: An issue in the Linux kernel can cause a denial of service due to out-of-bounds memory access and BUG when mounting a crafte...
PhotoArtist 2 Handles BMP with Denial of Service Vulnerability
PhotoArtist 2 is a photo manipulation tool. PhotoArtist 2 suffers from a denial of service vulnerability when processing BMP format, which can be exploited to cause a program crash by constructing a malformed BMP image that can be successfully exploited to cause arbitrary code execution...
EximiousSoft GIF Creator v7.31 Memory Corruption Vulnerability in Processing BMP Images
EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the BMP format. An attacker can cause the program to crash by constructing a malformed BMP image...
EximiousSoft Banner Maker v5.45 Handles BMP with Memory Corruption Vulnerability
EximiousSoft Banner Maker is an image manipulation tool. EximiousSoft Banner Maker suffers from a memory corruption vulnerability when processing the BMP format. An attacker can cause the program to crash by constructing a malformed BMP image, which if successfully exploited can lead to arbitrary...
flash-plugin: multiple code execution issues fixed in APSB17-33
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized...
CVE-2017-11213
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized...
libreoffice/pngfuzzer: Container-overflow in BitmapColor::GetBlue
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5533260961546240 Project: libreoffice Fuzzer: libFuzzerlibreofficepngfuzzer Fuzz target binary: pngfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...
