2495 matches found
OptiPNG Memory Misreference Vulnerability
OptiPNG is a set of tools for lossless compression of images. A memory misreference vulnerability exists in OptiPNG version 0.6.4, which stems from the program failing to properly filter inputs in BMP processing code. An attacker could use this vulnerability to cause a denial of service or execut...
OptiPNG Denial of Service Vulnerability (CNVD-2016-02172)
OptiPNG is a set of tools for lossless compression of images. A denial of service vulnerability exists in OptiPNG version 0.6.4, which stems from the program failing to properly filter inputs in BMP processing code. An attacker could exploit this vulnerability to cause a denial of service or...
Silicon Graphics LibTiff bmp2tiff Tool Denial of Service Vulnerability
Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in the 'DumpModeEncode' function in Silicon Graphics LibTiff's bmp2tiff tool, which allows an attacker to...
Silicon Graphics LibTiff bmp2tiff tool denial of service vulnerability (CNVD-2016-02092)
Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability in the 'ZIPEncode' function in the tifzip.c file in Silicon Graphics LibTiff's bmp2tiff tool allows an attacker to...
[SECURITY] [DSA 3546-1] optipng security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3546-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 07, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3546-1 (optipng - security update)
Hans Jerry Illikainen discovered that missing input sanitising in the BMP processing code of the optipng PNG optimiser may result in denial of service or the execution of arbitrary code if a malformed file is processed. OpenVAS Vulnerability Test $Id: deb3546.nasl 6608 2017-07-07 12:05:05Z cfisch...
Foxit Reader ConvertToPDF BMP Parsing Information Disclosure Vulnerability
Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the ConvertToPDF plug-in, due to a constructed BMP graphic that triggers a read of memory outside of the allocated object. Exploitation of this vulnerability allows an attacker to execut...
Foxit Reader ConvertToPDF BMP Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...
GLSA-201603-10 : QtGui: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201603-10 QtGui: Multiple vulnerabilities Multiple buffer overflow vulnerabilities have been discovered in QtGui. It is possible for remote attackers to construct specially crafted BMP, ICO, or GIF images that lead to buffer...
QtGui: Multiple vulnerabilities
Background QtGui is the GUI module and platform plugins for the Qt framework Description Multiple buffer overflow vulnerabilities have been discovered in QtGui. It is possible for remote attackers to construct specially crafted BMP, ICO, or GIF images that lead to buffer overflows. After...
Fedora 22 : potrace-1.13-2.fc22 (2015-89ee6b7f82)
Fix issues with BMP files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...
Fedora 23 : potrace-1.13-2.fc23 (2015-7852ea201b)
Fix issues with BMP files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...
PictureTrails Photo Editor GE.exe 2.0.0 - '.bmp' Crash (PoC)
Exploit for windows platform in category dos / poc Exploit Title: PictureTrail Photo Editor GE.exe 2.00 - ./bmp Crash PoC Date: 01-03-2016 Exploit Author: redknight99 Vendor Homepage: http://www.picturetrail.com/ Software Link: http://www.picturetrail.com/downloads/photoeditor200.exe Version: 2.0...
PictureTrails Photo Editor GE.exe 2.0.0 - .bmp Crash (PoC)
PictureTrails Photo Editor GE.exe 2.0.0 - .bmp Crash PoC Exploit Title: PictureTrail Photo Editor GE.exe 2.00 - ./bmp Crash PoC Date: 01-03-2016 Exploit Author: redknight99 Vendor Homepage: http://www.picturetrail.com/ Software Link: http://www.picturetrail.com/downloads/photoeditor200.exe Versio...
PictureTrails Photo Editor GE.exe 2.0.0 - '.bmp' Crash (PoC)
Exploit Title: PictureTrail Photo Editor GE.exe 2.00 - ./bmp Crash PoC Date: 01-03-2016 Exploit Author: redknight99 Vendor Homepage: http://www.picturetrail.com/ Software Link: http://www.picturetrail.com/downloads/photoeditor200.exe Version: 2.0.0 Tested on: Windows 7, 10 CVE : Unknown Picture...
SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2016:0225-1)
This update for gdk-pixbuf fixes the following security issues : - CVE-2015-7552: various overflows, including heap overflow in flipping bmp files bsc958963 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the precedin...
Foxit Reader ConvertToPDF Heap Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within ConvertToPDFx86.dll...
CVE-2015-8668
Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image...
Heap overflow
Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image...
CVE-2015-8668
Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image...