[SECURITY] Fedora 28 Update: cfitsio-3.430-1.fc28

CFITSIO is a library of C and FORTRAN subroutines for reading and writing data files in FITS Flexible Image Transport System data format. CFITSIO simplifies the task of writing software that deals with FITS files by providing an easy to use set of high-level routines that insulate the programmer...

The vulnerability of the GetImageDepth function in MagickCore/attribute.c, a console-based graphic editor for ImageMagick, allows a hacker to cause a service failure.

The vulnerability of the GetImageDepth function in MagickCore/attribute.c of the ImageMagick console graphic editor is related to the writing of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure rereading of the buffer in dynami...

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

Heap overflow

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

CVE-2017-11753

CVE-2017-11753 affects ImageMagick; the GetImageDepth function in MagickCore/attribute.c may cause a heap-based buffer over-read when processing a crafted FITS file, potentially enabling denial of service. Affected version noted as ImageMagick 7.0.6-4 in the provided document. No exploit details ...

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

Oracle Solaris Third-Party Patch Update : gimp (cve_2012_3236_buffer_overflow)

The remote Solaris system is missing necessary patches to address security updates : - fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed XTENSION header of a .fit file, as demonstrated using a long...

Null pointer dereference

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed XTENSION header of a .fit file, as demonstrated using a long string...

CVE-2012-3236

CVE-2012-3236 affects GIMP via fits-io.c: fits-io.c in GIMP before 2.8.1 allows a remote attacker to cause a denial of service (NULL pointer dereference and crash) by presenting a malformed FIT header in a .fit file. Connected advisories (Mandriva/openSUSE/SUSE/OpenVAS/NASL entries) confirm remed...

CVE-2012-3236

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed XTENSION header of a .fit file, as demonstrated using a long string...

Fedora 14 : nip2-7.24.2-1.fc14 / vips-7.24.7-2.fc14 (2011-10781)

7.24 series. Run-time code generation Open via disc mode Workspace as Graph mode for nip2 FITS image format VIPS rewrite Better nibs in paintbox Better TIFF and JPEG load Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

Stack overflow

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

CVE-2009-0254

CVE-2009-0254 involves a stack-based buffer overflow in easyHDR PRO 1.60.2 triggered by processing an invalid FITS file. The vulnerability could allow a user‑assisted attacker to execute arbitrary code, with the NVD entry modeling it as a network‑vector issue and providing a high impact. The conn...

Code injection

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...