UBUNTU-CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

Important: Red Hat Security Advisory: rh-ruby23-ruby security, bug fix, and enhancement update

An update for rh-ruby23-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

UBUNTU-CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

Directory traversal

The Grails Resource Plugin often has to exchange URIs for resources with other internal components. Those other components will decode any URI passed to them. To protect against directory traversal the Grails Resource Plugin did the following: normalized the URI, checked the normalized URI did no...

RHEL 7 : ruby (RHSA-2018:0378)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0378 advisory. - ruby: Buffer underrun vulnerability in Kernel.sprintf CVE-2017-0898 - rubygems: Escape sequence in the summary field of gemspec...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-06423)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A denial of service vulnerability exists in the decodeinit function in libavcodec/utvideodec.c in Ffmpeg versions 3.4.2 and earlier. A remote...

PT-2018-18154

Name of the Vulnerable Software and Affected Versions FFmpeg versions 2.8 through 3.4.2 Description The issue allows remote attackers to cause a denial of service Out of array read via an AVI file with crafted dimensions within chroma subsampling data. This is due to a problem in the decode init...

skia/animated_image_decode: Container-overflow in piex::GetFullCropDimension

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5667932416770048 Project: skia Fuzzer: libFuzzerskiaanimatedimagedecode Fuzz target binary: animatedimagedecode Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Container-overflow READ 4...

laztools.com XSS vulnerability

Open Bug Bounty ID: OBB-563492 Description| Value ---|--- Affected Website:| laztools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

skia/image_decode: Heap-buffer-overflow in GetLE16

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5727301313495040 Project: skia Fuzzer: aflskiaimagedecode Fuzz target binary: imagedecode Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000004...

UBUNTU-CVE-2018-6621

The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

DEBIAN-CVE-2018-6621

The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

Ffmpeg 'decode_frame' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeframe' function in the libavcodec/utvideodec.c file in FFmpeg 3.4.1 and earlier versions. A remote attacker can exploit this vulnerability to...

Design/Logic Flaw

ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...

CVE-2017-1000414

ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...

CVE-2017-1000414

ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...

CVE-2017-1000414

ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...

CVE-2017-1000414

ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...

PT-2018-5190

Name of the Vulnerable Software and Affected Versions ImpulseAdventure JPEGsnoop version 1.7.5 Description The issue results in a division by zero in the JFIF decode handling, leading to a denial of service. Recommendations For ImpulseAdventure JPEGsnoop version 1.7.5, at the moment, there is no...