The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or perform a denial-of-service attack

The Mozilla Firefox browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...

The vulnerability of the Thunderbird email client, which allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or trigger service failures by using specially crafted image data...

The vulnerability of the Mozilla SeaMonkey software package allows a malicious individual to execute arbitrary code or perform denial-of-service attacks.

Mozilla SeaMonkey software contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals operating remotely to execute arbitrary code or trigger service failures by using specially crafted image data...

The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or trigger a service denial

The Mozilla Firefox browser contains a vulnerability related to errors occurring when memory is used after it is freed in the imgRequestProxy function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, using values of the content types from the image data...

imlib2 integer overflow vulnerability (CNVD-2016-02331)

imlib2 is a general-purpose graphics loading and rendering library. imlib2 fails to properly allocate memory for image data, allowing a local attacker to exploit this vulnerability in an integer overflow attack that could crash an application...

CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

Design/Logic Flaw

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

FuseISO Integer Overflow Vulnerability

FuseISO is an open source FUSE module for mounting ISO filesystems such as .iso, .nrg, .bin, .mdf, and .img images, developed by software developer Adam Rimon. An integer overflow vulnerability exists in the 'isofsrealreadzf' function in the isofs.c file in FuseISO 20070708 and earlier versions. ...

openstack-glance: Glance image status manipulation through locations

An authorization vulnerability in OpenStack Image service was discovered, which allowed image-status manipulation using locations. By removing the last location of an image, an authenticated user could change the status from 'active' to 'queue'. A malicious tenant could exploit this flaw to...

Low: Red Hat Security Advisory: openstack-glance security update

Updated openstack-glance packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 7. Red Hat Product Security has rated this update as having a Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Low: Red Hat Security Advisory: openstack-glance security update

Updated openstack-glance packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

OpenJpeg opj_j2k_update_image_data function heap buffer overflow vulnerability

OpenJPEG library is written in C language open source JPEG 2000 codec . A heap buffer overflow vulnerability exists in the function opjj2kupdateimagedata in OpenJpeg version 2016.1.18, which can be exploited by a remote attacker to cause a denial of service out-of-bounds read and application cras...

Oracle Java readImage Heap Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of imag...

CVE-2016-0483

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not...

Heap overflow

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not...

CVE-2016-0483

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not...

CVE-2016-0483

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not...

UBUNTU-CVE-2016-0483

Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not...

file: mconvert incorrect handling of truncated pascal string size

A buffer overflow flaw was found in the way the File Information fileinfo extension processed certain Pascal strings. A remote attacker able to make a PHP application using fileinfo convert a specially crafted Pascal string provided by an image file could cause that application to crash...