openSUSE Security Update : optipng (openSUSE-2016-469)

optipng was updated to fix one security issue. This security issue was fixed : - CVE-2016-2191: Invalid write while processing bitmap images bsc973992. - CVE-2016-3981: Heap buffer overflow pngxrbmp.c bmpreadrows - CVE-2016-3982: Heap buffer overflow pngxrbmp.c bmprle4fread %NASLMINLEVEL 70300 C...

Updated optipng packages fix security vulnerabilities

An updated optipng package fixes a number of bugs and security vulnerabilities. CVE-2015-7802 - Buffer over-read issue CVE-2016-2191 - An invalid write and segmentation fault may occur while processing bitmap images...

MGASA-2016-0135 Updated optipng packages fix security vulnerabilities

An updated optipng package fixes a number of bugs and security vulnerabilities. CVE-2015-7802 - Buffer over-read issue CVE-2016-2191 - An invalid write and segmentation fault may occur while processing bitmap images...

DEBIAN-CVE-2016-3982

Off-by-one error in the bmprle4fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow...

DEBIAN-CVE-2016-2191

The bmpreadrows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service invalid memory write and crash via a series of delta escapes in a crafted BMP image...

Microsoft Windows Graphics Memory Corruption (MS16-039: CVE-2016-0145)

A vulnerability was found in Microsoft Windows that could potentially lead to remote code execution. The main cause is the lack of validation on glyph bitmap boundary during scaling operation. This vulnerability can be exploited using a malformed font file TTF...

Debian Security Advisory DSA 3547-1 (imagemagick - security update)

Several vulnerabilities were discovered in Imagemagick, a program suite for image manipulation. This update fixes a large number of potential security problems such as null-pointer access and buffer-overflows that might lead to memory leaks or denial of service. None of these security problems ha...

PT-2020-12507 · Freerdp +7 · Freerdp +7

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.0 through 2.0.0 Description: The issue is related to an out-of-bound read in the update read bitmap data function, which allows client memory to be read into an image buffer. The result of this action is displayed on the...

Windows bitmap内核释放后重用漏洞(CVE-2016-0094)

No description provided by source...

optipng: arbitrary code execution

An invalid write may occur in optipng before version 0.7.6 while processing bitmap images due to crtrow' being inc|decremented without any boundary checking when encountering delta escapes. This issue can possibly be used to execute arbitrary code...

Microsoft Windows Kernel - Bitmap Use-After-Free

Microsoft Windows Kernel - Bitmap Use-After-Free Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=686 ​The attached Proof-of-Concept crashes Windows 7 with special pool enabled on win32k.sys. The crashes are triggering in multiple different ways two examples attached. Proof of...

Microsoft Windows - Kernel Bitmap Use-After-Free

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=686 ​The attached Proof-of-Concept crashes Windows 7 with special pool enabled on win32k.sys. The crashes are triggering in multiple different ways two examples attached. Proof of...

Microsoft Windows Kernel - Bitmap Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=686 The attached Proof-of-Concept crashes Windows 7 with special pool enabled on win32k.sys. The crashes are triggering in multiple different ways two examples attached. Proof of Concept:...

Memory Corruption Vulnerability in PhotoLine's Processing of BMP Images

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the BMP format, which can be exploited by an attacker to construct malformed BMP files that can crash the program and cause a denial of service condition...

Memory Corruption Vulnerability in PhotoLine's Handling of GIF Images

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the GIF format, which can be exploited by an attacker to construct malformed BMP files that can crash the program and cause a denial of service condition...

PhotoLab Processing BMP Image Memory Corruption Vulnerability

PhotoLab is a Image Processing software developed by SELTECO Corporation company. A memory corruption vulnerability exists in the processing of BMP images. Allowing an attacker to exploit this vulnerability to construct a malformed BMP image could cause the program to crash...

PictBear Buffer Overflow Vulnerability

PictBear is image processing software for general users, known as the simple version of PHOTOSHOP. A buffer overflow vulnerability exists in the impBmp.ppi module of the software, which allows an attacker to exploit the vulnerability to construct a malformed BMP image that can lead to flooding of...

Microsoft Windows OleLoadPicture Bitmap Heap Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Nitro Pro Handles BMP Image Memory Corruption Vulnerability

Nitro pro is a PDF production and management software. Nitro pro software has a memory corruption vulnerability in the handling of BMP images. Allowing an attacker to exploit this vulnerability by constructing malformed BMP images can cause the program to crash...

The vulnerability of the Autodesk Design Review software for applying electronic annotations allows a hacker to execute arbitrary code.

The vulnerability of the Autodesk Design Review software for applying electronic annotations is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, using a specially crafted value of biClrUsed in the BMP file, which causes th...