2311 matches found
brython-server (>=2.0.3, <=2.2.1), cimage (>=1.4.1, <=1.4.2) +7 more potentially affected by CVE-2020-11538 via pillow (2.9.0)
pillow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - brython-server =2.0.3, =1.4.1, =0.0.1, =1.0.7, =0.6.1, =0.1.1, =0.5.28, =0.0.1.dev0, =1.0.0b1 Source cves: CVE-2020-11538 Source advisory:...
brython-server (>=2.0.3, <=2.2.1), cimage (>=1.4.1, <=1.4.2) +7 more potentially affected by CVE-2020-10994 via pillow (2.9.0)
pillow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - brython-server =2.0.3, =1.4.1, =0.0.1, =1.0.7, =0.6.1, =0.1.1, =0.5.28, =0.0.1.dev0, =1.0.0b1 Source cves: CVE-2020-10994 Source advisory:...
About the security content of watchOS 6.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
ImageGear Code Execution
The vulnerability of the IGloadfile function in the ImageGear image processing library is related to the output of the operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created ICO file...
icon-generator.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1190321 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
openSUSE Security Update : opera (openSUSE-2020-709)
This update for opera fixes the following issues : Opera was updated to version 68.0.3618.104 - CHR-7909 Update chromium on desktop-stable-81-3618 to 81.0.4044.138 - CVE-2020-6831, CVE-2020-6464 - DNA-85609 Mac Tabs shrinking & disappearing - DNA-85629 Crash at...
SUSE-SU-2020:1296-1 Security update for autoyast2
This update for autoyast2 to version 4.1.15 fixes the following issues: Security issue fixed: - CVE-2019-18905: Removed all '--gpg-auto-import-keys' options from zypper commands bsc1140711. Non-security issue fixed: - Fix desktop files updating some icons and groups bsc1168123. - Restored some...
DEBIAN-CVE-2020-12761
modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...
CVE-2020-12761
modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...
UBUNTU-CVE-2020-12761
modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...
Integer overflow
modules/loaders/loaderico.c in imlib2 1.6.0 has an integer overflow with resultant invalid memory allocations and out-of-bounds reads via an icon with many colors in its color map...
CVE-2020-12761
CVE-2020-12761 affects imlib2 1.6.0, where modules/loaders/loader_ico.c contains an integer overflow that enables invalid memory allocations and out-of-bounds reads when processing ICO icons with many colors in the color map. Public writeups (Ubuntu/SUSE/CNVD/OSV entries) describe it as enabling ...
DEBIAN-CVE-2020-11042
In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in updatereadiconinfo. It allows reading a attacker-defined amount of client memory 32bit unsigned - 4GB to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has...
UBUNTU-CVE-2020-11042
In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in updatereadiconinfo. It allows reading a attacker-defined amount of client memory 32bit unsigned - 4GB to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has...
Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-27759)
Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability in the 'icoread' function of the igcore19d.dll library in Accusoft ImageGear version 19.6.0. A remote attacker can exploit this vulnerability to execute code with the help...
Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-27758)
Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer error vulnerability exists in the igcore19d.dll ICO icoread parser in Accusoft ImageGear version 19.5.0. An attacker can exploit this vulnerability to execute code with the help of specially...
Credit card skimmer masquerades as favicon
Malware authors are notorious for their deceptive attempts at staying one step ahead of defenders. As their schemes get exposed, they always need to go back to their bag of tricks to pull out a new one. When it comes to online credit card skimmers, we have already seen a number of evasion...
CVE-2020-6076
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victi...
Receiver for Windows 4.12- Size of Icon is Too Small and DPI Settings are Not Passed Through
The size of the icon is too small and the DPI settings are not passed through the Receiver...
Microsoft Windows user32 Icon Extraction Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...