UBUNTU-CVE-2019-11693

The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. Note: this issue only occurs on Linux. Other operating systems are unaffected.. This...

DEBIAN-CVE-2019-12219

An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is an invalid free error in the SDL function SDLSetErrorREAL at SDLerror.c...

Denial Of Service (DoS) Through Infinite Loop

PHP is vulnerable to denial-of-service attacks. A remote unauthenticated attacker could cause denial of Service via infinite loop in imagecreatefromgif/imagecreatefromstring function in ext/gd/libgd/gdgifin.c. The affected component is GD Graphics Library...

Information Disclosure

PHP is vulnerable to information disclosure vulnerability. The vulnerability exists in gdImageCreateFromGifCtx in GD Graphics Library used in PHP. An attacker could use a specially crafted GIF image and read up to 762 bytes from stack...

Denial Of Service (DoS) Through Memory Corruption

PHP is vulnerable to denial of serviceDoS attacks. This occurs in the gdImageFillToBorder function in gd.c in the GD Graphics Library when passing a negative integer as the color parameter. A remote attacker could force a negative color identifier when calling the function which may crash the PHP...

Fedora Update for cairo FEDORA-2018-3a195026f5

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to buffer overflow vulnerability. This occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. An incorrect value being passed within the library during checks and results in a potentially exploitable crash...

The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to buffer overflow in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

OPENSUSE-SU-2019:1148-1 Security update for gd

This update for gd fixes the following issues: Security issues fixed: - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. - CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. This update was imported...

EulerOS Virtualization 2.5.4 : gd (EulerOS-SA-2019-1250)

According to the version of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is...

The vulnerability of the `gdImage` function in the GD Graphics Library allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the gdImage function: Pointer gdgifout.c, gdjpeg.c, gdwbmp.c In the GD Graphics Library, this vulnerability is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Cairo: Denial of service

Background Cairo is a 2D vector graphics library with cross-device output support. Description Multiple vulnerabilities have been discovered in Cairo. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There ...

SUSE SLED15 / SLES15 Security Update : gd (SUSE-SU-2019:0771-1)

This update for gd fixes the following issues : Security issues fixed : CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. Note that Tenable Network...

SUSE-SU-2019:0771-1 Security update for gd

This update for gd fixes the following issues: Security issues fixed: - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. - CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522...

SUSE-SU-2019:0747-1 Security update for gd

This update for gd fixes the following issues: Security issues fixed: - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. - CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522...

The vulnerability of the get_rgba_default function in the libcaca graphics library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the getrgbadefault function in the libcaca graphics library is related to integer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Low: libwmf

Issue Overview: The GD Graphics Library aka LibGD has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is unaffected. CVE-2019-6978 Affected Packages: libwmf Issue Correction: Run yum update libwmf or yum update --advisory ALAS-2019-1174 to update your...

EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1069)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop vulnerability was found in ext/iconv/iconv.c in PHP due to the iconv stream not rejecting invalid multibyte sequences. A remote...

Amazon Linux 2 : libwmf (ALAS-2019-1174)

The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is unaffected.CVE-2019-6978 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security...

EulerOS 2.0 SP5 : gd (EulerOS-SA-2019-1064)

According to the version of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is...