CVE-2013-7438

Multiple buffer overflows in pbm212030 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted PBM image, related to 1 stream line data, which triggers a heap-based buffer overflow, or 2 vectors related to an "internal intermediate heap-based...

CVE-2013-7438

The CVE-2013-7438 entry concerns pbm212030, a PBM image processing tool. The vulnerability is described as multiple heap-based buffer overflows triggered by crafted PBM images, enabling remote attackers to cause a crash (DoS) or potentially execute arbitrary code. Reported vectors reference (1) s...

PHP Exif Header Parsing Integer Overflow - Ver2 (CVE-2011-4566)

An integer overflow vulnerability has been reported in PHP. The vulnerability is due to lack of EXIF data validation. A Remote attacker could exploit this vulnerability by uploading a specially crafted image to the target server. Successful exploitation could result in sensitive information...

kernel: isofs: unbound recursion when processing relocated directories

It was found that the parserockridgeinodeinternal function of the Linux kernel's ISOFS implementation did not correctly check relocated directories when processing Rock Ridge child link CL tags. An attacker with physical access to the system could use a specially crafted ISO image to crash the...

Microsoft windows PNG Parsing Remote Information Disclosure Vulnerability

Microsoft Windows is a popular operating system. A remote information disclosure vulnerability exists in Microsoft windows PNG parsing, which can be exploited by remote attackers to obtain sensitive memory information due to a program's failure to properly handle uninitialized memory, by...

Microsoft JPEG XR Parser Information Disclosure (MS15-029; CVE-2015-0076)

An information disclosure vulnerability has been reported in Microsoft JPEG XR Parser. The vulnerability is triggered when Windows fails to properly handle uninitialized memory when parsing certain, specially crafted JPEG XR image format files. A remote attacker can exploit this issue by enticing...

UBUNTU-CVE-2014-9655

The 1 putcontig8bitYCbCr21tile function in tifgetimage.c or 2 NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

DEBIAN-CVE-2015-0236

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIRDOMAINXMLSECURE flag with a crafted 1 snapshot to the virDomainSnapshotGetXMLDesc interface or 2 image to the virDomainSaveImageGetXMLDesc interface...

CVE-2014-9330

Integer overflow in tifpackbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service crash via crafted BMP image, related to dimensions, which triggers an out-of-bounds read...

Oracle Solaris Third-Party Patch Update : libtiff (cve_2013_4243_buffer_errors)

The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a...

CVE-2014-9602

libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

Huawei eSpace Desktop V100R001C03 Denial of Service Vulnerability (CNVD-2015-00029)

Huawei eSpace Desktop is a Unified Communications PC client developed by Huawei. A denial of service vulnerability exists in versions prior to Huawei eSpace Desktop V100R001C03, which allows local users to cause a denial of service via a crafted image...

PT-2014-9026 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and application crash, via a crafted dpc image. Recommendations: At the moment, there i...

PT-2014-9032 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service via a crafted wpg file, resulting in a NULL pointer dereference. Recommendations: At the moment, there is no information...

UBUNTU-CVE-2014-8129

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tifnext.c to verify that the BitsPerSample value is 2, and the t2psamplelabsignedtounsigned function in tiff2pdf...

PT-2014-9027 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and application crash, via a crafted xwd image. Recommendations: At the moment, there i...

UBUNTU-CVE-2014-9420

The rockcontinue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service infinite loop, and system crash or hang via a crafted iso9660 image...

CVE-2014-9417

The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service program exit via a crafted image...

Design/Logic Flaw

The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service program exit via a crafted image...

kernel: udf: Avoid infinite loop when processing indirect ICBs

A stack overflow flaw caused by infinite recursion was found in the way the Linux kernel's Universal Disk Format UDF file system implementation processed indirect Information Control Blocks ICBs. An attacker with physical access to the system could use a specially crafted UDF image to crash the...