Debian DSA-4084-1 : gifsicle - security update

It was discovered that gifsicle, a tool for manipulating GIF image files, contained a flaw that could lead to arbitrary code execution. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4084. The text itself is...

Denial of Service Vulnerability in SWFTools Software png2swf Module

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the png2swf module of the SWFTools software. An attacker can cause the program to crash when working with malformed png files, which can lead to arbitrary code execution if...

Denial of Service Vulnerability in SWFTools Software gif2swf Module

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. A denial of service vulnerability exists in the gif2swf module of the SWFTools software. An attacker working with malformed gif files can cause the program to crash and, if successfully exploited, can lead to arbitrar...

LibTIFF Denial of Service Vulnerability (CNVD-2017-38251)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A denial of service vulnerability exists in tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9. A remote attacker could cause a denial of service TIFFSetupStrips heap buffer overflow and application crash by...

Debian DSA-4040-1 : imagemagick - security update

This update fixes several vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed image files are processed. %NASLMINLEVEL 70300 C Tenabl...

Vulnerability Spotlight: Multiple vulnerabilities in Computerinsel Photoline

These vulnerabilities are discovered by Piotr Bania of Cisco Talos.Today, Talos is releasing details of multiple vulnerabilities discovered within the Computerinsel GmbH PhotoLine image processing software. PhotoLine, developed by Computerinsel GmbH, is a well established raster and vector graphi...

CVE-2017-14265

A stack buffer overflow flaw was found in the way dcraw handled processing of RAW image files. This flaw could potentially be used to crash the dcraw process by supplying it a specially crafted image file...

XnView Classic for Windows Arbitrary Code Execution Vulnerability (CNVD-2017-32593)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...

CVE-2017-14290

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. When attackers input malicious image files, it causes a NULL pointer dereference issue in the ReadCUTImage function in coders/cut.c...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25056)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in ImageMagick's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into...

Microsoft Windows OLE Global Buffer Overflow (CVE-2017-8487)

A global buffer overflow vulnerability exists in Microsoft Windows OLE. The vulnerability is due to improper validation of image files embedded within an OLE stream. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted web page, an email message...

Virtuozzo 7 : openjpeg / openjpeg-devel / openjpeg-libs (VZLSA-2017-0838)

An update for openjpeg is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2017-10973

In FineCMS before 2017-07-06, application/lib/ajax/getimagedata.php has SSRF, related to requests for non-image files with a modified HTTP Host header...

Server side request forgery (ssrf)

In FineCMS before 2017-07-06, application/lib/ajax/getimagedata.php has SSRF, related to requests for non-image files with a modified HTTP Host header...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14637)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

CVE-2017-9913

XnView Classic for Windows Version 2.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!TpAllocCleanupGroup+0x00000000000003d7."...

EulerOS 2.0 SP2 : jasper (EulerOS-SA-2017-1095)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to...

GLSA-201706-06 : ImageWorsener: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201706-06 ImageWorsener: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ImageWorsener. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

Amazon Linux AMI : jasper (ALAS-2017-836)

Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code. CVE-2016-8654 , CVE-2016-9560 , CVE-2016-10249 , CVE-2015-5203 , CVE-2015-5221 , CVE-2016-1577 , CVE-2016-8690...