CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

Ubiquitous Bug Allows HIPAA-Protected Malware to Hide Behind Medical Images

A bug in a 30-year-old standard used for the exchange and storage of medical images has been uncovered; it allows an adversary to embed fully-functioning executable code into the image files captured by medical devices such as CT and MRI machines. This results in hybrid files that allow malware...

PT-2019-18306 · Foxit · Foxit Studio Photo

Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6 Description: This issue allows remote attackers to disclose sensitive information. It requires user interaction, such as visiting a malicious page or opening a malicious file. The flaw exists within the handli...

Updated SDL12 packages fix security vulnerability

This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. - Fix CVE-2019-7577 a buffer overread in MSADPCMdecode rhbz1676510 - Fix CVE-2019-7575 a buffer overwrite in MSADPCMdecode rhbz1676744 - Fix CVE-2019-7574 a buffer overread in...

FastStone Image Viewer Code Issue Vulnerability

FastStone Image Viewer is a free image viewing, converting and editing tool. A code issue vulnerability exists in FastStone Image Viewer. An attacker could exploit this vulnerability via specially crafted image files to cause a denial of service...

USN-3906-2: LibTIFF vulnerabilities

USN-3906-1 and USN-3864-1 fixed several vulnerabilities in LibTIFF. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a...

Fedora 28 : SDL (2019-6092f8c0dc)

This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and form...

Fedora 29 : SDL (2019-7a554204c1)

This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and form...

CVE-2018-20794

CVE-2018-20794 affects tecrail Responsive FileManager (version 9.13.4). The flaw is a path traversal in the save_img action of ajax_calls.php, enabling remote attackers to write to arbitrary image files (jpg/jpeg/png). The issue originates from how the path parameter is handled, allowing modifica...

PHP Scripts Mall Cab Booking Script Path Traversal Vulnerability

PHP Scripts Mall Cab Booking Script is a cab booking website system by PHP Scripts Mall India. A path traversal vulnerability exists in PHP Scripts Mall Cab Booking Script version 1.0.3, which can be exploited by an attacker to obtain a list of parent directories for jpg or png files...

Denial Of Service (DoS)

jasper is vulnerable to denial of service. Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A malicious file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Integer Overflow

CUPS is vulnerable to integer overflow. The vulnerability is possible because it does not properly handle compressed raster image files, allowing the attacker to input a malicious file and trigger the cups filter to crash...

SUSE SLES12 Security Update : php5 (SUSE-SU-2016:0284-1)

This update for php5 fixes the following issues : - CVE-2015-7803: Specially crafted .phar files with a crafted TAR archive entry allowed remote attackers to cause a Denial of Service DoS bsc949961 - CVE-2016-1903: Specially crafted image files could could allow remote attackers read unspecified...

SUSE SLES15 Security Update : php7 (SUSE-SU-2018:2840-1)

This update for php7 fixes the following issues : Security issue fixed : CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434 Note that Tenable Network...

SUSE SLED15 / SLES15 Security Update : gd (SUSE-SU-2018:2888-1)

This update for gd fixes the following issues : Security issue fixed : CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434 Note that Tenable Network...

[SECURITY] Fedora 27 Update: libtiff-4.0.10-1.fc27

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

CVE-2018-19124

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files...

CVE-2018-19124

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files...

Code injection

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files...

CVE-2018-19124

PrestaShop CVE-2018-19124 affects PrestaShop 1.6.x (before 1.6.1.23) and 1.7.x (before 1.7.4.4) on Windows. The issue allows remote attackers to write to arbitrary image files. Remediation: upgrade to PrestaShop 1.6.1.23 or 1.7.4.4, as referenced in the maintenance releases.