129 matches found
PS2EXE - Module To Compile Powershell Scripts To Executables
Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with one switch, real windows executables are generated. With Powershell 5.x support and graphical front end. Module version. You find the script based version here...
Pillow 输入验证错误漏洞
Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. A denial of service vulnerability exists in Pillow versions prior to 8.1.1. The vulnerability stems from not...
The vulnerability of the IG_load_file function in the ImageGear image processing library allows a hacker to execute arbitrary code.
The vulnerability of the IGloadfile function in the ImageGear image processing library is related to the output of the operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created ICO file...
Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-27758)
Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer error vulnerability exists in the igcore19d.dll ICO icoread parser in Accusoft ImageGear version 19.5.0. An attacker can exploit this vulnerability to execute code with the help of specially...
Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-27759)
Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability in the 'icoread' function of the igcore19d.dll library in Accusoft ImageGear version 19.6.0. A remote attacker can exploit this vulnerability to execute code with the help...
Credit card skimmer masquerades as favicon
Malware authors are notorious for their deceptive attempts at staying one step ahead of defenders. As their schemes get exposed, they always need to go back to their bag of tricks to pull out a new one. When it comes to online credit card skimmers, we have already seen a number of evasion...
CVE-2020-6076
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victi...
MGASA-2019-0063 Updated cinnamon packages fix security vulnerability
A flaw was found in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of for example other users' icon files in onfacebrowsemenuitemactivated and onfacemenuitemactivated. These icon files are written to the respective user's $HOME/.face locatio...
XnView Denial of Service Vulnerability (CNVD-2019-10273)
XnView is a multi-platform software that supports image viewing, conversion and editing. A denial of service vulnerability exists in XnView 2.45, which can be exploited by remote attackers to cause a denial of service via a specially crafted ICO file...
CVE-2018-14036
CVE-2018-14036 : Affected component is AccountsService (before 0.6.50) with an insufficient path check in user_change_icon_file_authorized_cb() in user.c, enabling a directory traversal via ../ sequences. Public references in Ubuntu USN-4616-1, SUSE/SUSE-SU advisories, and OpenVAS/Nessus entries ...
gstreamer: Out of bounds heap read in windows_icon_typefind
The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...
Denial Of Service (DoS) Through Memory Leak
ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible due to a flaw in coders/icon.c that causes a memory leak...
The vulnerability of the ReadICONImage function in the console-based image editing tool ImageMagick allows a hacker to cause an unexpected termination of the application.
The vulnerability of the ReadICONImage function coders\icon.c in the console-based graphic editor ImageMagick is related to a memory leak. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to terminate abnormally lead to a memory exhaustion conditio...
UBUNTU-CVE-2017-9405
In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service memory leak via a crafted file...
CVE-2017-8765
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file...
ImageMagick Memory Leak Vulnerability
ImageMagick is the United States ImageMagick Studio, Inc. of a set of open source image processing software, the software can read, convert, write a variety of formats. A memory leak vulnerability in the function named ReadICONImage in the encoder icon.c in ImageMagick version 7.0.5-5 allows remo...
CVE-2017-8765
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file...
Memory corruption
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file...