SUSE SLES11 Security Update : jasper (SUSE-SU-2017:0946-1)

This update for jasper fixes the following issues: Security issues fixed : - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec bsc1012530 - CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment bsc1010977. - CVE-2016-9398: jpcmath.c:94: int jpcfloorlog2int:...

PT-2018-5099

Name of the Vulnerable Software and Affected Versions jasper versions prior to 2.0.6 Description An out-of-bounds heap read issue was found in the jpc pi nextpcrl function when processing crafted input. Recommendations For versions prior to 2.0.6, update to version 2.0.6 or later to resolve the...

DEBIAN-CVE-2017-5923

libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted rule that is mishandled in the yarayyparse function...

CVE-2016-9556

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file...

CVE-2016-9556

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file...

CVE-2016-9556

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file...

CVE-2016-9556

Technical details for CVE-2016-9556 are not available in the provided connected documents; only the core description and references are present. Monitor official advisories for updates.

CVE-2016-9556

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file...

CVE-2016-9556: Improper Restriction of Operations within the Bounds of a Memory Buffer

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file...

AZL-7267 CVE-2017-5834 affecting package libplist 2.1.0-4

The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...

Design/Logic Flaw

The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...

CVE-2017-5834

The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...

CVE-2017-5834

The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...

CVE-2017-5834

CVE-2017-5834 affects the libplist library. The parse_dict_node function in bplist.c can cause a denial of service via an out-of-bounds heap read/crash when presented with a crafted plist file. Some advisories note upstream fixes in later libplist releases (e.g., 2.0.0+), with distributions like ...

CVE-2017-5834

The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...

CVE-2017-5834

The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...

PT-2017-16699

Name of the Vulnerable Software and Affected Versions libplist affected versions not specified Description The issue allows attackers to cause a denial of service, resulting in an out-of-bounds heap read and crash, via a crafted file. This is due to a problem in the parse dict node function in...

ImageMagick 'IsPixelGray' Function Denial of Service Vulnerability - Mac OS X

ImageMagick is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-9773

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556...

CVE-2016-9773: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556...