3352 matches found
[SECURITY] Fedora 36 Update: giflib-5.2.1-14.fc36
giflib is a library for reading and writing gif images...
CVE-2021-46829
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
CVE-2021-46829
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
DEBIAN-CVE-2021-46829
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
Heap overflow
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
CVE-2021-46829
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
CVE-2021-46829
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
UBUNTU-CVE-2021-46829
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
CVE-2021-46829
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
CVE-2021-46829
GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit systems...
CVE-2021-46829
GNOME GdkPixbuf (GIF decoding path) is affected by a heap-based buffer overflow in frames during GIF compositing/clearing, exploitable via io-gif-animation.c composite_frame. Root cause: overflow in GIF lzw/decode path, reported for versions before 2.42.8. Impact: potential arbitrary code executi...
GdkPixBuf 输入验证错误漏洞
GdkPixBuf is a library that supports loading image files in multiple formats. An input validation error vulnerability exists in GNOME GdkPixBuf versions prior to 2.42.8, which stems from allowing heap-based buffer overflows when compositing or clearing frames in a GIF file, as shown in...
OESA-2022-1762 gdk-pixbuf2 security update
gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites. Security Fixes: A flaw was found in gdk-pixbuf in versions before...
Atlassian Jira < 8.13.14 / 8.14.x < 8.19.0 (JRASERVER-72738)
The version of Atlassian Jira installed on the remote host is prior to 8.13.14 / 8.14.x 8.19.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72738 advisory. - Denial of Service when reading particularly-crafted GIF files - CVE-2021-39116 CVE-2021-39116 Note that...
Mattermost: DOS: out of memory from gif through upload api
Summary: When sending a specially crafted gif with max dimensions through the upload API, we get Mattermost server to consume more than 4Gbytes of RAM Steps To Reproduce: add details for how we can reproduce the issue 1. Run docker run --name mattermost-preview -d --publish 8065:8065...
OESA-2022-1723 giflib security update
giflib is a library of gif images and provides utilities for processing images. Security Fixes: There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB in gif2rgb.c:298:45.CVE-2022-28506...
GIFLIB Denial of Service Vulnerability
GIFLIB is a library for reading and editing gif images. A denial of service vulnerability exists in GIFLIB version 5.1.4, which originates from a gif2rgb memory leak in util/gif2rgb.c, and can be exploited by a remote attacker to trigger an out-of-memory exception or a denial of service via a gif...
CVE-2021-42732 Adobe InDesign crashes when parsing the GIF file
Access of Memory Location After End of Buffer CWE-788...