CVE-2017-14571

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000049c024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025706."...

CVE-2017-14560

STDU Viewer 1.6.375 is vulnerable to a buffer overflow via a specially crafted .xps file (reported in CVE-2017-14560). The issue relates to Data from Faulting Address controlling Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x5bd2, potentially allowing a local attacker to cause a ...

CVE-2017-14538

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at jbig2dec+0x0000000000008823."...

CVE-2017-14573

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000030c024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566a."...

CVE-2017-14580

CVE-2017-14580 affects XnView Classic for Windows (v2.41). The vulnerability is triggered by processing a crafted .jb2 file and is described as enabling arbitrary code execution or a denial of service, linked to a “User Mode Write AV starting at jbig2dec+0x000000000000870f.” Connected sources con...

CVE-2017-14576

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Possible Stack Corruption starting at Unknown Symbol @ 0x00000000049f0281."...

CVE-2017-14563

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005311."...

CVE-2017-14555

Summary (CVE-2017-14555) STDU Viewer 1.6.375 is affected by a local-denial-of-service-style vulnerability caused by a buffer overflow when processing crafted .djvu files. The issue is tied to data from a faulting address being used as arguments in a subsequent function call beginning at STDUDjVuF...

CVE-2017-14560

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd2."...

CVE-2017-14548

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000854d."...

DEBIAN-CVE-2017-14528

The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service use-after-free after an invalid call to TIFFSetField,...

CVE-2017-14528

The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service use-after-free after an invalid call to TIFFSetField,...

ImageMagick Denial of Service Vulnerability (CNVD-2017-27606)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the ReadMATImage of coders/mat.c file in ImageMagick version 7.0.6-6. An...

Poppler 'isImageInterpolationRequired()' Function Denial of Service Vulnerability

Poppler is a C++ class library for generating PDF. A security vulnerability in the 'isImageInterpolationRequired' function in the Poppler Splash.cc file allows remote attackers to exploit the vulnerability by submitting a specially crafted file, which induces the user to parse it, crashing the...

CVE-2017-14528

The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service use-after-free after an invalid call to TIFFSetField,...

CVE-2017-14348

LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file...

The vulnerability of the ReadOneLayer function (coders/xcf.c) in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadOneLayer function in the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory consumption through a specially crafted file...

EMC CMCNE 11.2.1 Inmservlets.war FileUploadController Remote Code Execution

require 'msf/core' class MetasploitModule 'EMC CMCNE Inmservlets.war FileUploadController Remote Code Execution', 'Description' = %q This module exploits a file upload vulnerability found in EMC Connectrix Manager Converged Network Edition 'james fitts' , 'License' = MSFLICENSE, 'References' =...

LibOFX Buffer Overflow Vulnerability

LibOFX is a library that allows programs to support OFX financial data bi-directional exchange command responses. A buffer overflow vulnerability exists in the label parsing feature in LibOFX version 0.9.11. An attacker can exploit this vulnerability to execute code or cause a denial of service...

DEBIAN-CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...