19 matches found
EUVD-2022-46610
Malicious code in bioql PyPI...
CVE-2022-43614
CorelDRAW Graphics Suite 23.5.0.506 is affected by a GIF file parsing vulnerability that can cause a write past the end of an allocated object, enabling arbitrary code execution in the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file)....
CVE-2022-43614: Out-of-bounds Write
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
SUSE CVE-2017-14450
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...
Buffer overflow
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...
CVE-2017-14450
CVE-2017-14450 affects SDL2_image-2.0.2, where the GIF image parsing functionality has a buffer overflow risk in the global section when processing a specially crafted GIF image displayed by a user. Public sources in connected docs confirm this vulnerability and its association with SDL2_image’s ...
CVE-2017-14450: Improper Restriction of Operations within the Bounds of a Memory Buffer
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...
PT-2018-10822
Name of the Vulnerable Software and Affected Versions Foxit Reader version 9.0.0.29935 Description This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file...
Adobe Acrobat Pro DC ImageConversion EMF GIF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...
Microsoft DirectShow Remote Code Execution (MS13-056; CVE-2013-3174)
A remote code execution vulnerability has been reported in the Microsoft DirectShow. The vulnerability is due to faulty GIF image files parsing. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted GIF file. A successfull exploitation of this vulnerability...
Mandriva Linux Security Advisory : firefox (MDVSA-2009:294)
Security issues were identified and fixed in firefox 3.5.x : Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code...
Debian Security Advisory DSA 1598-1 (libtk-img)
The remote host is missing an update to libtk-img announced via advisory DSA 1598-1. OpenVAS Vulnerability Test $Id: deb15981.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1598-1 libtk-img Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
DSA-1598-1 libtk-img - arbitrary code execution
Bulletin has no description...
DSA-1493-2 sdl-image1.2 - arbitrary code execution
Bulletin has no description...
Debian Security Advisory DSA 1490-1 (tk8.3)
The remote host is missing an update to tk8.3 announced via advisory DSA 1490-1. OpenVAS Vulnerability Test $Id: deb14901.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1490-1 tk8.3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1490-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1493-1 (sdl-image1.2)
The remote host is missing an update to sdl-image1.2 announced via advisory DSA 1493-1. OpenVAS Vulnerability Test $Id: deb14931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1493-1 sdl-image1.2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
Debian DSA-1491-1 : tk8.4 - buffer overflow
It was discovered that a buffer overflow in the GIF image parsing code of Tk, a cross-platform graphical toolkit, could lead to a denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...