icoutils: Buffer overflow in the extract_icons function

A vulnerability was found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution...

Users unable to see the pinned taskbar icons with UPM profile

Users unable to open an application from the pinned taskbar icons...

DEBIAN-CVE-2017-6010

An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extracticons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash...

UBUNTU-CVE-2017-6010

An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extracticons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash...

[SECURITY] Fedora 24 Update: icoutils-0.31.1-1.fc24

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries...

Changing delivery group icons with storefront 3.0 or above in the environment.

...

COLOR WEATHER ICONS FOR HDW - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application COLOR WEATHER ICONS FOR HDW published at the 'play' market has multiple vulnerabilities...

Wallpapers, Icons - LINE DECO - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Wallpapers, Icons - LINE DECO published at the 'play' market has multiple vulnerabilities...

WordPress Category-Page-Icons插件-wpdev-flash-uploader.php文件-文件上传漏洞

No description provided by source...

Memory Corruption Vulnerability in PhotoLine's Handling of ICO Files

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the ICO format, which can be exploited by an attacker to construct malformed ICO files that can crash the program and cause a denial of service condition...

March 8, 2016, update for Visio 2016 (KB3114844)

None None...

Debian DSA-3507-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-8126 Joerg Bornemann discovered multiple buffer overflow issues in the libpng library. - CVE-2016-1630 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in Blink/Webkit. - CVE-2016-1631 Mariusz...

Debian Security Advisory DSA 3507-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-8126 Joerg Bornemann discovered multiple buffer overflow issues in the libpng library. CVE-2016-1630 Mariusz Mlynski discovered a way to bypass the Same Origin Policy in Blink/Webkit. CVE-2016-1631 Mariusz Mlynski...

DLA-353-1 imagemagick - security update

Bulletin has no description...

change fontset 'icons' to html entities to improve security compliance

It seems that the icons in Confluence are currently rendered using fontset. This can be an issue for organization especially banks that have strict security constraint fontset cannot be downloaded as a result this will not render on customer instance. I would recommend that we change the current...

Floating Social Media Icon <= 2.1 - Authenticated Stored Cross-Site Scripting (XSS)

The Social Media Flying Icons | Floating Social Media Icon WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4

Multiple cross-site scripting XSS vulnerabilities in the multisite component in CheckMK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the 1 renderstatusicons function in htmllib.py or 2 ajaxaction functio...

WordPress Easy Social Icons Plugin <= 1.2.3.1 - SQL Injection

Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands. Solution Upgrade this plugin...

Easy Social Icons <= 1.2.3.1 - Authenticated SQL Injection

The Easy Social Icons WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

openSUSE Security Update : chromium (openSUSE-2015-449)

chromium was updated to 43.0.2357.130 to fix several security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-1266: Scheme validation error in WebUI - CVE-2015-1268: Cross-origin bypass in Blink - CVE-2015-1267: Cross-origin bypass in Blink - CVE-2015-1269: Normalization...