CVE-2014-0146

The qcow2open function in the block/qcow2.c in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service NULL pointer dereference via a crafted image which causes an error, related to the initialization of the snapshotoffset and nbsnapshots fields...

PHP gdImageCreateFromGifCtx Out of Bounds Read (CVE-2017-7890)

An out of bounds read vulnerability exists in PHP. The vulnerability is due to improper handling of objects in memory within the gdImageCreateFromGifCtx function of gdgifin.c. A remote attacker could exploit this vulnerability by supplying a crafted image file to an application using the affected...

The vulnerability of the ReadOneDJVUImage function in the console-based ImageMagick graphic editor allows a hacker to trigger a service failure.

The vulnerability of the ReadOneDJVUImage function in the console-based ImageMagick graphics editor is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure an infinite loop, excessive consumption of computationa...

Ubuntu 12.04 LTS : tiff vulnerabilities (USN-3212-4)

USN-3212-1 fixed several issues in LibTIFF. This update provides a subset of corresponding update for Ubuntu 12.04 ESM. Mei Wang discovered a multiple integer overflows in LibTIFF which allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image,...

UBUNTU-CVE-2014-9827

coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file...

DEBIAN-CVE-2014-9827

coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file...

CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2017-22728)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat Reader in the existence of memory corruption vulnerabilities. Remote...

OpenExif 'ExifJpegHUFFTable::deriveTable' function denial of service vulnerability

OpenExif is an object-oriented library for accessing image files in Exif format. A security vulnerability exists in the 'ExifJpegHUFFTable::deriveTable' function of the ExifHuffmanTable.cpp file in OpenExif version 2.1.4. A remote attacker can exploit this vulnerability to cause a denial of servi...

UBUNTU-CVE-2015-5203

Double free vulnerability in the jasperimagestopload function in JasPer 1.900.17 allows remote attackers to cause a denial of service crash via a crafted JPEG 2000 image file...

CVE-2017-11115

The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted jpg file...

CVE-2017-11117

The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted jpg file...

ImageMagick 'GetImageDepth' Function Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'GetImageDepth' function of the MagickCore/attribute.c file in ImageMagick...

JasPer JPEG-2000 library 'mif_process_cmpt' function memory misreference vulnerability

JasPer JPEG-2000 library is a Canadian software developer Michael Adams developed an open source JPEG-2000 encoding library . A memory misreference vulnerability exists in the 'mifprocesscmpt' function in the libjasper/mif/mifcod.c file in versions of the JasPer JPEG-2000 library prior to 1.900.2...

JasPer jp2_decode Out of Bounds Read (CVE-2017-9782)

An out-of-bounds array indexing vulnerability has been reported in JasPer. The vulnerability is due to improper handling of objects in memory within the jp2decode function of jp2dec.c. A remote attacker could exploit this vulnerability by supplying a crafted image file to an application using the...

SUSE-SU-2017:1901-1 Security update for jasper

This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-9262: Multiple integer overflows in the jasrealloc function in base/jasmalloc.c and memresize function in base/jasstream.c allow remote attackers to cause a denial of service via a crafted image, which triggers u...

ImageMagick 'coders/rle.c' Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in ImageMagick versions prior to 7.0.5-10, which stems from the failure of the...

GLSA-201707-07 : JasPer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201707-07 JasPer: Multiple vulnerabilities Multiple vulnerabilities have been discovered in JasPer. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

GraphicsMagick 'ReadJPEGImage' Denial of Service Vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadJPEGImage' function in the coders/jpeg.c file in GraphicsMagick version 1.3.26. A remote attacker can exploit thi...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14499)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...