EUVD-2017-3691

Malware in sbrugna...

EUVD-2017-12061

Malware in sbrugna...

EUVD-2018-15672

Malware in sbrugna...

EUVD-2017-3690

Malware in sbrugna...

EUVD-2018-15673

Malware in sbrugna...

EUVD-2018-15709

Malware in sbrugna...

EUVD-2017-12021

Malware in sbrugna...

Memory corruption

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and...

CVE-2018-3921

A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerability and...

CVE-2018-3923

A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability...

CVE-2018-3923

Photoline 20.54 is affected by a memory corruption vulnerability in the PCX parsing code, specifically in the PCX run-length encoding path. A specially crafted PCX image can trigger an out-of-bounds write, allowing an attacker to overwrite arbitrary data and potentially gain code execution. The T...

CVE-2018-3921

Photoline 20.54 contains a PSD-parsing memory corruption vulnerability (CVE-2018-3921) in the PSD blending channels path that can cause a stack-based overflow and potentially allow code execution. The Talos analysis explains that the blending channel length is read from the image and used to driv...

CVE-2018-3922

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and...

CVE-2018-3922

CVE-2018-3922 : A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54 (OS X). A specially crafted ANI image can trigger a stack/heap overflow via a faulty length/header handling in the ANI parser, overwriting arbitrary data and potentially enab...

CVE-2018-3921: Out-of-bounds Write

A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerability and...

CVE-2018-3923: Out-of-bounds Write

A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability...

CVE-2018-3922: Out-of-bounds Write

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and...

Vulnerability Spotlight: Computerinsel Photoline Multiple Vulnerabilities

Vulnerabilities discovered by Tyler Bohan from Talos Overview Today, Cisco Talos is disclosing several vulnerabilities in Computerinsel Photoline. Photoline is an image-processing tool used to modify and edit images, as well as other graphic-related material. This product has a sizable user base...

Computerinsel Photoline PSD Blending Channel Code Execution Vulnerability

Summary A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerabili...

CVE-2017-12107

An memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel Photoline 20.02. A specially crafted .PCX file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .PCX file to trigger this vulnerability...