Samsung Galaxy S6 Samsung Gallery - GIF Parsing Crash

Source: https://code.google.com/p/google-security-research/issues/detail?id=500 There is a crash when the Samsung Gallery application load the attached GIF, colormap.gif. D/skia 10905: GIF - Parse error D/skia 10905: --- decoder-decode returned false F/libc 10905: Fatal signal 11 SIGSEGV, code 2,...

Foxit PhantomPDF < 7.2 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is affected by multiple vulnerabilities : - A memory overflow condition exists in the PDF creator plugin ConvertToPDFx86.dll when converting a PNG file to a PDF file due to an...

IBM Domino SMTP Buffer Overflow Vulnerability

IBM Domino is a platform for hosting social business applications. The platform combines business messaging, applications and social collaboration and provides users with real-time online communication capabilities. A buffer overflow vulnerability exists in IBM Domino that allows remote attackers...

CVE-2007-2833

Emacs 21 allows user-assisted attackers to cause a denial of service crash via certain crafted images, as demonstrated via a GIF image in vm mode, related to image size calculation...

CVE-2006-2906

The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw GD library aka libgd 2.0.33 allows remote attackers to cause a denial of service CPU consumption via malformed GIF data that causes an infinite loop...

CVE-2008-2934

Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer...

CVE-2015-5040

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service SMTP daemon crash via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than...

Buffer overflow

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service SMTP daemon crash via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than...

CVE-2015-4994

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service SMTP daemon crash via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than...

Buffer overflow

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service SMTP daemon crash via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than...

CVE-2015-4994

Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote attackers to execute arbitrary code or cause a denial of service SMTP daemon crash via a crafted GIF image, aka SPRs KLYH9ZDKRE and KLYH9ZTLEZ, a different vulnerability than...

CVE-2015-4994

CVE-2015-4994 affects IBM Domino 8.5.1–8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3. It is a buffer overflow in the SMTP image parsing (GIF) code, allowing remote attackers to execute arbitrary code or cause a denial of service (SMTP daemon crash). Root cause: improper bounds checking...

DEBIAN-CVE-2015-7674

Integer overflow in the pixopsscalenearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow...

Integer overflow

Integer overflow in the pixopsscalenearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow...

CVE-2015-7674

Integer overflow in the pixopsscalenearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow...

CVE-2015-7674

CVE-2015-7674 affects gdk-pixbuf prior to 2.32.1. The issue is an integer overflow in pixops_scale_nearest (pixops/pixops.c) that can be triggered by a crafted GIF image, leading to a heap-based buffer overflow with potential denial of service (application crash) and possibly arbitrary code execu...

CVE-2015-7674

Integer overflow in the pixopsscalenearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow...

Debian DSA-3378-1 : gdk-pixbuf - security update

Several vulnerabilities have been discovered in gdk-pixbuf, a toolkit for image loading and pixel buffer manipulation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-7673 Gustavo Grieco discovered a heap overflow in the processing of TGA images whi...

Debian Security Advisory DSA 3378-1 (gdk-pixbuf - security update)

Several vulnerabilities have been discovered in gdk-pixbuf, a toolkit for image loading and pixel buffer manipulation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-7673 Gustavo Grieco discovered a heap overflow in the processing of TGA images which...

Debian: Security Advisory (DSA-3378-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...