CVE-2016-4629

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...

Memory corruption

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...

Memory corruption

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted EXR image with B44 compression...

CVE-2016-4629

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...

CVE-2016-4630

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted EXR image with B44 compression...

CVE-2016-4629

CVE-2016-4629 affects Apple’s OS X ImageIO (OS X before 10.11.6). A crafted EXR image can trigger memory corruption via signed xStride/yStride values, enabling remote code execution or a denial of service. Apple lists OS X 10.11.6 (El Capitan) and Security Update 2016-004 as the fix; patching is ...

CVE-2016-4630

CVE-2016-4630 : Apple ImageIO on OS X (EXR/B44 compression) is affected by a memory-corruption vulnerability that can enable remote code execution when processing crafted EXR images. Disclosed in 2016 with public exploit details showing a heap-based overflow risk due to improper handling of B44 c...

USN-831-1: OpenEXR vulnerabilities

Drew Yao discovered several flaws in the way OpenEXR handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...