Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists if an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user...

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the Python rgbimg module. If an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly,...

Arbitrary Code Execution

python is vulnerable to arbitrary code execution. The vulnerability exists if an application written in Python was using the rgbimg module and loaded a specially-crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. Multiple missing input sanitization flaws were discovered in PHP's exif extension. A specially-crafted image file could cause the PHP interpreter to crash or, possibly, disclose portions of its memory when a PHP script tried to extract Exchangeable...

Privilege Escalation

ibm java is vulnerable to privilege escalation. A remote attacker is able to obtain higher privileges using a malicious image file...

Privilege Escalation

ibm java is vulnerable to privilege escalation. A remote attacker is able to obtain higher privileges using a malicious image file...

Denial Of Service (DoS)

java is vulnerable to denial of service DoS. The vulnerability exists as a null pointer dereference flaw was found in LittleCMS. An application using color profiles could crash while converting a specially-crafted image file...

Arbitrary Code Execution

lcms is vulnerable to arbitrary code execution. The vulnerability exists in the way LittleCMS handled color profiles. An attacker could use these flaws to create a specially-crafted image file which could cause a Java application to crash or, possibly, execute arbitrary code when opened...

Arbitrary Code Execution

lcms is vulnerable to arbitrary code execution. The vulnerability exists in the way LittleCMS handled color profiles. An attacker could use these flaws to create a specially-crafted image file which could cause a Java application to crash or, possibly, execute arbitrary code when opened...

Integer Overflow

The GIMP GNU Image Manipulation Program is vulnerable to Integer Overflow. An attacker could create a carefully crafted image file that could cause The GIMP to crash or possibly execute arbitrary code if the file was opened by a victim...

Integer Overflow

The GIMP GNU Image Manipulation Program is vulnerable to Integer Overflow. An attacker could create a carefully crafted image file that could cause The GIMP to crash or possibly execute arbitrary code if the file was opened by a victim...

The vulnerability of the exif_process_IFDTag function in the PHP programming language allows a perpetrator to gain unauthorized access to information or cause service failures.

The vulnerability of the exifprocessIFDTagName function in the PHP programming language is related to the execution of an operation that exceeds the permissible buffer data limits. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information or cause servic...

CVE-2018-17101

An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

CVE-2018-17100

An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file...

ImageMagick: out-of-bounds write in InsertRow function in coders/cut.c

The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write...

ImageMagick: excessive iteration in the DecodeLabImage and EncodeLabImage functions in coders/tiff.c

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file

An infinite loop has been found in the way ImageMagick reads Multiple-image Network Graphics MNG data. An attacker could exploit this to cause a denial of service via crafted MNG file...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. A flaw in MagickWand/mogrify.c causes memory leaks, allowing an attacker to input a malicious image file to trigger an application crash...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The attack exists because the function WriteTIFFImage of coders/tiff.c causes memory leaks in AcquireMagickMemory , allowing an attacker to input a malicious image file to trigger a heap-based buffer over-read...

The vulnerability of the Foxit Studio Photo graphic editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit Studio Photo graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability allows a hacker to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF format file...