The vulnerability of the exif_process_SOFn function in the EXIF interpreter for the PHP programming language allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the exifprocessSOFn function in the EXIF interpreter for the PHP programming language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file

An infinite loop has been found in the way ImageMagick reads Multiple-image Network Graphics MNG data. An attacker could exploit this to cause a denial of service via crafted MNG file...

The vulnerability of the Foxit Studio Photo graphic editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit Studio Photo graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability allows a hacker to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF format file...

The vulnerability of the Foxit Studio Photo graphic editor lies in the ability to write code beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit Studio Photo graphic editor is related to writing code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF forma...

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18403)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which results from the program failing to properly validate...

Foxit Studio Photo Resource Management Error Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A resource management error vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which originates from the program failing to veri...

Denial of Service Vulnerability in FreeImage TIFF Files

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A denial of service vulnerability exists in the FreeImage image parsing library when parsing meta information ...

PYSEC-2020-81

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

PYSEC-2020-81

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

Free Photo Viewer Code Issue Vulnerability

Free Photo Viewer is a lightweight photo viewer. A code issue vulnerability exists in Free Photo Viewer. The vulnerability can be exploited to execute arbitrary code via specially crafted BMP and/or TIFF files...

The vulnerability in the software for creating 3D computer graphics with Blender arises from a full-integer overflow, allowing an attacker to execute arbitrary code.

The vulnerability of Blender’s software for creating 3D computer graphics arises from a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created TIFF file...

CVE-2019-5084

An exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of LEADTOOLS 20. A specially crafted TIF image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a TIF ima...

Memory corruption vulnerability in XnView ldf files

XnView from France is a great image viewer with image viewer, screen capture, slideshow, thumbnail maker, batch conversion, hexadecimal browsing, drag-and-drop, address book, scanning input, etc. It supports more than 100 image formats, and more than 500 images after installing plug-ins. XnView l...

Memory Corruption Vulnerability in TIFF Image Processing by Good123 Photo King

Good123 Viewer is an image viewing software. A memory corruption vulnerability exists in the handling of TIFF images by Good123 Viewer, which can be exploited by attackers to cause the program to crash by constructing malformed TIFF images...

Binary Vulnerability in Exif Pilot

Exif Pilot is a free EXIF editor from Two Pilots. A binary vulnerability exists in Exif Pilot's handling of the TIFF format, which can be exploited by an attacker to cause the program to crash by constructing a malformed TIFF-formatted image...

Binary Vulnerability in Flying Pigeon Network Printing Component (CNVD-2019-33149)

Flying Pigeon is a LAN instant messaging software for enterprises, schools and families, realizing high-speed transmission of messages and files within LAN and printing on Flying Pigeon network. A binary vulnerability exists in the Flying Pigeon Network Printing component, which can be exploited ...

Binary Vulnerability in Windshade Viewer FyPicEditor.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

Binary Vulnerability in Windshade Viewer FyPicViewer.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

UBUNTU-CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

UBUNTU-CVE-2019-12212

When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file...