CVE-2017-16938

An invalid memory write flaw was found in the way OptiPNG handles processing of GIF files. This flaw could potentially be used to crash the OptiPNG program by tricking it into processing crafted GIF files...

Mail.ru: Uninitilized server memory disclosure via ImageMagick

It was possible to disclosure the part of server memory from uncontrolled location on the server belonging to "Moi Mir" my.mail.ru project via uploaded GIF image header manipulation. my.mail.ru is not currently in the Bug Bounty scope, reward was paid as a bonus due to potential severity...

Debian DLA-1196-1 : optipng security update

optipng, an advanced PNG Portable Network Graphics optimizer, has been found vulnerable to a buffer overflow which allows remote attackers to cause a denial of service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte...

[SECURITY] [DLA 1196-1] optipng security update

Package : optipng Version : 0.6.4-1+deb7u4 CVE ID : CVE-2017-16938 Debian Bug : 878839 optipng, an advanced PNG Portable Network Graphics optimizer, has been found vulnerable to a buffer overflow which allows remote attackers to cause a denial-of-service attack or other unspecified impact with a...

Buffer overflow

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...

CVE-2017-16938

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...

UBUNTU-CVE-2017-16938

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...

CVE-2017-16938

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...

DEBIAN-CVE-2017-16938

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...

CVE-2017-16938

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...

CVE-2017-16938

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...

CVE-2017-16938

OptiPNG 0.7.6 is affected by a global buffer overflow in the GIF processing path, specifically due to an uncontrolled loop in gifread.c's LZWReadByte, which can allow remote-triggered denial-of-service or other unspecified impact. Affected component: OptiPNG (gif processing). Underlying cause: un...

CVE-2017-16938

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file...

Memory Corruption Vulnerability in EximiousSoft GIF Creator v7.31 Processing ICO Images (CNVD-2017-36513)

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the ICO format. An attacker can cause the program to crash by constructing malformed ICO images...

Memory Corruption Vulnerability in EximiousSoft GIF Creator v7.31 Processing BMP Images (CNVD-2017-36511)

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the BMP format. An attacker can cause the program to crash by constructing a malformed BMP image...

EximiousSoft GIF Creator v7.31 Memory Corruption Vulnerability in Processing BMP Images

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the BMP format. An attacker can cause the program to crash by constructing a malformed BMP image...

[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.22-1.fc26

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

[SECURITY] Fedora 27 Update: ImageMagick-6.9.9.22-1.fc27

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Adobe Acrobat and Reader Improper Validation of Array Index (APSB17-36: CVE-2017-16410)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted Gif file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Debian DSA-4032-1 : imagemagick - security update

This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed GIF, TTF, SVG, TIFF, PCX, JPG or SFW files are processe...