CVE-2014-9764

CVE-2014-9764 affects imlib2, specifically the GIF loader. A crafted GIF can cause a segmentation fault (DoS) in versions before 1.4.7. Connected advisories show multiple vendors addressing imlib2 GIF/PNM/GIF-w/o-colormap issues; patches upgrade imlib2 to at least 1.4.9 (openSUSE openSUSE-2016-60...

UBUNTU-CVE-2014-9762

imlib2 before 1.4.7 allows remote attackers to cause a denial of service segmentation fault via a GIF image without a colormap...

UBUNTU-CVE-2016-3994

The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service application crash or obtain sensitive information via a crafted image, which triggers an out-of-bounds read...

CVE-2014-9762

imlib2 before 1.4.7 allows remote attackers to cause a denial of service segmentation fault via a GIF image without a colormap...

CVE-2016-3994

The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service application crash or obtain sensitive information via a crafted image, which triggers an out-of-bounds read...

mplayer: denial of service

A vulnerability has been discovered that is leading to a crash when playing a fuzzed gif file. The gif demuxes assumed in many places that widthheight is = INTMAX, however this was not always true and was leading to an integer overflow...

mencoder: denial of service

A vulnerability has been discovered that is leading to a crash when playing a fuzzed gif file. The gif demuxes assumed in many places that widthheight is = INTMAX, however this was not always true and was leading to an integer overflow...

FFmpeg 2.x版本服务器端请求伪造漏洞

详情来源 ：ffmpeg SSRF漏洞分析 ffmpeg得反应很快，1月16日就发布了修复版本。 漏洞影响 如果ffmpeg解析了一个恶意的文件，会导致本地的文件信息泄露。受影响的出了ctf中这个在线视频格式转换的服务外，如果是采用ffmpeg了客户端如果可以输入恶意文件也会造成本地文件信息泄露。 漏洞分析 change log中提到了两个CVE CVE-2016-1897和CVE-2016-1898。 CVE-2016-1897 FFmpeg 2.x版本允许攻击者通过服务器端请求伪造SSRF：Server-Side Request Forgery...

[SECURITY] [DLA 458-1] mplayer2 security update

Package : mplayer2 Version : 2.0-554-gf63dbad-1+deb7u1 CVE ID : CVE-2016-4352 Mplayer2 is crashing when playing a fuzzed gif file. The gif demuxes assumes in many places that widthheight is = INTMAX; this might not be true. Fixed by validating the picture size...

DLA-458-1 mplayer2 - security update

Bulletin has no description...

[SECURITY] [DLA 457-1] mplayer security update

Package : mplayer Version : 2:1.0rc4.dfsg1+svn34540-1+deb7u2 CVE ID : CVE-2016-4352 Mplayer is crashing when playing a fuzzed gif file. The gif demuxes assumes in many places that widthheight is = INTMAX; this might not be true. Fixed by validating the picture size...

MPlayer Integer Overflow Vulnerability

MPlayer is an open source multimedia player developed by the MPlayer team, which supports multiple media formats and multiple drivers. MPlayer suffers from an integer overflow vulnerability. An attacker can exploit this vulnerability to cause a denial of service crash via a gif file...

imlib2: multiple issues

CVE-2011-5326 denial of service Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2016-3993 information leakage Yuriy M. Kaminskiy discovered that drawing using coordinates from an untrusted source could lead to an out-of-bound memory...

Foxit Reader and PhantomPDF Denial of Service Vulnerability (CNVD-2016-02734)

Foxit Reader PhantomPDF is a commercial version of the Chinese Foxit Foxit Software Corporation's PDF document reader. A denial of service vulnerability exists in Foxit Reader PhantomPDF 7.3.0.118 and earlier versions, which allows remote attackers to cause a denial of service via a crafted JPEG...

Debian DSA-3555-1 : imlib2 - security update

Several vulnerabilities were discovered in imlib2, an image manipulation library. - CVE-2011-5326 Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2014-9771 It was discovered that an integer overflow could lead to invalid memory reads a...

giflib gif2rgb heap buffer overflow vulnerability

giflib is a library and utility program for working with GIF images. gif2rgb is one of the modules that converts the GIF file format to RGB24 format based on the C language. A heap buffer overflow vulnerability exists in the util/gif2rgb.c file in giflib's gif2rgb, which allows remote attackers t...

CVE-2016-4065

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted 1 JPEG, 2 GIF, or 3 BMP image...

CVE-2016-4065

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted 1 JPEG, 2 GIF, or 3 BMP image...

CVE-2016-4065

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted 1 JPEG, 2 GIF, or 3 BMP image...

CVE-2016-4065

The CVE-2016-4065 issue affects Foxit Reader and Foxit PhantomPDF on Windows, where the ConvertToPDF plugin can trigger an out-of-bounds read in image handling (JPEG/GIF/BMP) when the gflags app is enabled, causing a denial of service (application crash). Affected versions are Foxit Reader/Phanto...