CVE-2017-12925

Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service via a crafted fpx image...

Heap overflow

Heap-based buffer overflow in OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service via a crafted fpx image...

CVE-2017-12921

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12920

CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12921

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

Null pointer dereference

wchar.c in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

Double free

Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service via a crafted fpx image...

CVE-2017-12920

CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12923

OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

PT-2017-12781 · Swiss Federal Institute Of Technology +1 · Libfpx +1

Name of the Vulnerable Software and Affected Versions: libfpx version 1.3.1 p6 Description: A double free issue in the DfFromLB function in docfile.cxx allows remote attackers to cause a denial of service via a crafted fpx image. Recommendations: For libfpx version 1.3.1 p6, update to a version...

PT-2017-12777 · Libfpx +1 · Libfpx +1

Name of the Vulnerable Software and Affected Versions: libfpx version 1.3.1 p6 Description: The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted fpx image. This is due to a problem in the...

CVE-2015-7896

LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service memory corruption and SIGSEGV via a crafted image file...

CVE-2015-7896

LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service memory corruption and SIGSEGV via a crafted image file...

Memory corruption

LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service memory corruption and SIGSEGV via a crafted image file...

CVE-2015-7896

LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service memory corruption and SIGSEGV via a crafted image file...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25056)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in ImageMagick's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into...

OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)

It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory...

Updated shutter packages fix security vulnerability

Remote attackers could trick users into assisting them in executing arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action CVE-2016-10081...

MGASA-2017-0292 Updated shutter packages fix security vulnerability

Remote attackers could trick users into assisting them in executing arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action CVE-2016-10081...

DEBIAN-CVE-2014-0146

The qcow2open function in the block/qcow2.c in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service NULL pointer dereference via a crafted image which causes an error, related to the initialization of the snapshotoffset and nbsnapshots fields...