NetPBM 'xpmtoppm' Converter Buffer Overflow Vulnerability

This host is installed with NetPBM and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnetpbmxpmtoppmbofvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ NetPBM 'xpmtoppm' Converter Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

NetPBM 'xpmtoppm' Converter Buffer Overflow Vulnerability

NetPBM is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 6757)

IBM Java 1.4.2 was updated to 13 fp3. The following security issues were fixed: CVE-2009-3867: A buffer overflow vulnerability in the Java Runtime Environment audio system might allow an untrusted applet or Java Web Start application to escalate privileges. For example, an untrusted applet might...

SuSE9 Security Update : IBM Java2 JRE and SDK (YOU Patch Number 12565)

IBM Java 1.4.2 was updated to 13 fp3. The following security issues were fixed : - A buffer overflow vulnerability in the Java Runtime Environment audio system might allow an untrusted applet or Java Web Start application to escalate privileges. For example, an untrusted applet might grant itself...

CentOS 5 : libexif (CESA-2007:1165)

Updated libexif packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specificatio...

Microsoft Windows Kodak Image Viewer Code Execution (MS07-055; CVE-2007-2217)

Kodak Image Viewer is the picture viewer shipped with Microsoft Windows. It is capable of handling several types of popular graphic document format such as BMP, JPEG, PCX, GIF, TIFF. There exists a buffer overflow vulnerability in Microsoft Windows Kodak Image Viewer. The vulnerability is due to ...

Firefox Image File Dragging Malformed Extension (CVE-2005-0230)

The Mozilla web browser and its derivatives, Firefox, Netscape, and K-Meleon are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages and downloading files. The Mozilla web browser allows the user to quickly save images displayed on web pages by...

Mandriva Security Advisory MDVSA-2009:317 (netpbm)

The remote host is missing an update to netpbm announced via advisory MDVSA-2009:317. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Microsoft GDI+ TIFF File Processing 'BitsPerSample' Tag Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes TIFF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts...

Microsoft GDI+ WMF Integer Overflow (MS09-062; CVE-2009-2500)

The Microsoft Windows graphics device interface GDI enables applications to use graphics and formatted text on the video display and on the printer.Windows Metafile WMF is a 16-bit metafile image format optimized for the Windows operating system that can contain both vector information and bitmap...

SuSE 11 Security Update : lcms (SAT Patch Number 635)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code. CVE-2009-0723 / CVE-2009-0581 / CVE-2009-0733 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

USN-831-1: OpenEXR vulnerabilities

Drew Yao discovered several flaws in the way OpenEXR handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

Fedora Core 11 FEDORA-2009-8993 (xemacs)

The remote host is missing an update to xemacs announced via advisory FEDORA-2009-8993. OpenVAS Vulnerability Test $Id: fcore20098993.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8993 xemacs Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-8997 (xemacs)

The remote host is missing an update to xemacs announced via advisory FEDORA-2009-8997. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 11 : xemacs-21.5.29-2.fc11 (2009-8993)

This update fixes multiple buffer overflows when reading large image files, or maliciously created image files whose headers misrepresent the actual image size. The update also addresses multiple font issues, some of which cause warnings on startup. Some warnings remain, however, unless an...

Fedora 10 : xemacs-21.5.28-10.fc10 (2009-8997)

This update fixes multiple buffer overflows when reading large image files, or maliciously created image files whose headers misrepresent the actual image size. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

On the Twitter DDoS Attacks, Apple and Microsoft Patches

Threatpost editors Ryan Naraine and Dennis Fisher discuss the DDoS attacks against Twitter, Facebook and LiveJournal and delve into Apple’s Mac OS X patch and Microsoft’s Patch Tuesday plans. SHOW NOTES: UPDATE: Twitter Suffers DoS Attack Apple Warns of Mac Attack Risk via Image Files Microsoft...

openSUSE Security Update : lcms (lcms-581)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code CVE-2009-0723, CVE-2009-0581, CVE-2009-0733. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : GraphicsMagick (GraphicsMagick-229)

Specially crafted image files could crash GraphicsMagick CVE-2008-3134. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update GraphicsMagick-229. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : lcms (lcms-581)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code CVE-2009-0723, CVE-2009-0581, CVE-2009-0733. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...