Debian DLA-1234-2 : gdk-pixbuf regression update

The patch introduced in DLA-1234-1 had a problem that caused gdk-pixbuf's gif module to fail to load. For Debian 7 'Wheezy', these problems have been fixed in version 2.26.1-1+deb7u8. We recommend that you upgrade your gdk-pixbuf packages. NOTE: Tenable Network Security has extracted the precedin...

HackerOne: ImageMagick GIF coder vulnerability leading to memory disclosure

Hello Hackerone Security Team, Well,we are aware of Imagemagick Gif parsor method to collect the pixels and then we can recover it to gain server information. https://github.com/neex/gifoeb However,it has no impact on hackerone since it's immune to gif files uploading functionality. So, ,gif...

Security update for ImageMagick (important)

This update for ImageMagick fixes the following issues: - security update xcf.c: CVE-2017-14343: Memory leak vulnerability in ReadXCFImage could lead to denial of service via a crafted file. CVE-2017-12691: The ReadOneLayer function in coders/xcf.c allows remote attackers to cause a denial of...

Updated libextractor packages fix security vulnerability

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

Gnome gdk-pixbuf integer overflow vulnerability

gdk-pixbuf is a toolkit for image loading and pixel buffer manipulation. An integer overflow vulnerability exists in the gifgetlzw function in Gnome gdk-pixbuf. An attacker can exploit this vulnerability to cause memory corruption and implement code execution...

DEBIAN-CVE-2017-1000422

Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gifgetlzw function resulting in memory corruption and potential code execution...

UBUNTU-CVE-2017-1000421

Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the readgif function resulting potential code execution...

DEBIAN-CVE-2017-1000421

Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the readgif function resulting potential code execution...

UBUNTU-CVE-2017-1000422

Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gifgetlzw function resulting in memory corruption and potential code execution...

gif-finder.com XSS vulnerability

Open Bug Bounty ID: OBB-456287 Description| Value ---|--- Affected Website:| gif-finder.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1386)

This update for GraphicsMagick fixes the following issues : - CVE-2017-14042: Denial of service through a large memory allocation via specially crafted PNM images boo1056550 - CVE-2017-14504: NULL pointer dereference via specially crafted PNM images boo1059721 - CVE-2017-17498: Denial of service ...

Updated optipng packages fix security vulnerability

- CVE-2017-1000229: Fix integer overflow bug in function minitiffreadinfo allows an attacker to remotely execute code or cause denial of service. - CVE-2017-16938: Fix a global buffer overflow that allows attackers to cause DoS via a maliciously crafted GIF file...

CVE-2017-16410

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

CVE-2017-16410

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

Design/Logic Flaw

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the...

CVE-2017-16410

CVE-2017-16410 affects Adobe Acrobat/Reader (versions 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue arises from untrusted GIF input that is used to calculate an array index in the image conversion module, leading to a write to ...

Denial of Service Vulnerability in SWFTools Software gif2swf Module

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the gif2swf module of the SWFTools software. An attacker working with malformed gif files can cause the program to crash and, if successfully exploited, can lead to arbitrar...

Null pointer dereference

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

CVE-2017-17440

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

CVE-2017-17440

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...