457 matches found
Warning! Your iPhone Can Get Hacked Just by Opening a JPEG Image, PDF or Font File
What's worse than knowing that innocent looking JPEGs, PDFs and font files can hijack your iPhone, iPad, and iPod. Yes, attackers can take over your vulnerable Apple's iOS device remotely – all they have to do is trick you to view a maliciously-crafted JPEG graphic or PDF file through a website o...
DLA-647-1 freeimage - security update
Bulletin has no description...
USN-3095-1: PHP vulnerabilities
Taoguang Chen discovered that PHP incorrectly handled certain invalid objects when unserializing data. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-7124 Taoguang Chen discovered that PHP incorrectly...
FreeImage Library XMP Image Handling Code Execution Vulnerability
Summary An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this...
freeimage -- code execution vulnerability
TALOS reports: An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library...
openSUSE Security Update : gtk2 (openSUSE-2016-1118)
This gtk2 update to version 2.24.31 fixes the following issues : Security issues fixed : - CVE-2013-7447: Fixed integer overflow in image handling boo966682. Bugs fixed : - Changes from version 2.24.31 : + Backport many file chooser entry fixes and cleanups. + Don't crash if invisible files are...
Foxit Reader BMP Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows a remote attacker to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...
Foxit Reader < 7.2 Multiple RCE
Binary data 9458.prm...
Apple OS X Scene Kit DAE XML Code Execution Vulnerability
SUMMARY An exploitable type confusion vulnerability exists in the handling of DAE images on OS X. A crafted DAE document can trigger a type confusion vulnerability which potentially could be exploited to achieve attacker controlled code execution. Vulnerability can be triggered via a saved DAE fi...
Apple Core Graphics BMP Framework img_decode_read Remote Code Execution Vulnerability
SUMMARY An exploitable out of bounds write exists in the handling of BMP images on Apple OS X and iOS. A crafted BMP document can lead to an out of bounds write resulting in remote code execution. Vulnerability can be triggered via a saved BMP file delivered by other means when opened in any...
USN-3030-1 libgd2 vulnerabilities
It was discovered that the GD library incorrectly handled memory when using gdImageScaleTwoPass. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2013-7456 It was discovered that the GD library incorrectly handled certain...
ImageMagick 7.x < 7.0.2-0 ReadSUNImage() Function SUN Image Handling DoS
The remote Windows host has a version of ImageMagick installed that is 7.x prior to 7.0.2-0. It is, therefore, affected by a denial of service vulnerability due to a flaw in the ReadSUNImage function in sun.c that is triggered during the handling of malformed SUN images. An unauthenticated, remot...
openSUSE Security Update : gdk-pixbuf (openSUSE-2016-669)
This update for gdk-pixbuf fixes the following issues : - CVE-2015-7552: Fixed various overflows in image handling boo958963. - CVE-2015-7673: Fixed an overflow and DoS with a TGA file boo948790. - CVE-2015-7674: Fixed overflow when scaling a gif boo948791. %NASLMINLEVEL 70300 C Tenable Network...
openSUSE Security Update : gdk-pixbuf (openSUSE-2016-405)
This update for gdk-pixbuf fixes the following issues : - CVE-2015-7552: Fixed various overflows in image handling boo958963. - CVE-2015-7673: Fixed an overflow and DoS with a TGA file boo948790. - CVE-2015-7674: Fixed overflow when scaling a gif boo948791. %NASLMINLEVEL 70300 C Tenable Network...
Apple iOS Disk Image Handling Arbitrary Code Execution Vulnerability
Apple iOS is Apple's operating system for several smart devices. An arbitrary code execution vulnerability exists in Apple iOS disk image handling, which could allow a local attacker to execute arbitrary code...
CVE-2015-7548
OpenStack Compute Nova before 2015.1.3 kilo and 12.0.x before 12.0.1 liberty, when using libvirt to spawn instances and usecowimages is set to false, allow remote authenticated users to read arbitrary files by overwriting an instance disk with a crafted image and requesting a snapshot...
Apple OS X Disk Image Memory Corruption Vulnerability
Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a memory corruption vulnerability in the handling of disk image files, which allows attackers to exploit the vulnerability to construct malicious files that can be induced to be parsed by an application, which can b...
MGASA-2015-0471 Updated imagemagick packages fix security vulnerabilities
Updated imagemagick packages fix security vulnerabilities: This update fixes denial of service issues in miff, vicar, hdr, and pdb image handling, a buffer overflow issue in icon handling, and double-free issues in pict and tga image handling...
Apple iOS/OS X Dish Images Memory Corruption Vulnerability (CNVD-2015-07156)
OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. Apple iOS/OS X Dish Images has a memory corruption vulnerability. Allowing an attacker to exploit the vulnerability an...