[SECURITY] Fedora 14 Update: feh-1.10.1-1.fc14

feh is a versatile and fast image viewer using imlib2, the premier image file handling library. feh has many features, from simple single file viewing, to multiple file modes using a slide-show or multiple windows. feh supports the creation of montages as index prints with many user-configurable...

eyeOS 1.9.0.2 - Image File Handling HTML Injection

source: https://www.securityfocus.com/bid/47629/info eyeOS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input passed through image content before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the...

CVE-2008-7286

IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which allows remote authenticated users to cause a denial of service daemon crash via a request to resources.nsf, aka SPR XFXF7JDBCX...

USN-960-1: libpng vulnerabilities

It was discovered that libpng did not properly handle certain malformed PNG images. If a user or automated system were tricked into opening a crafted PNG file, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program...

iTunes < 9.2 Multiple Vulnerabilities

Binary data 5573.prm...

Apple iTunes < 9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2. As such, it may be affected by multiple vulnerabilities : - A heap-based buffer overflow in the handling of images with an embedded ColorSync profile may lead to an application crash or arbitrary code execution...

ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability

ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-047 April 2, 2010 -- CVE ID: CVE-2010-0164 -- Affected Vendors: Mozilla Firefox -- Affected Products: Mozilla Firefox 3.6.x -- TippingPoint...

CVE-2010-0065

Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted disk image with bzip2 compression...

Apple Patches 12 Serious Mac OS X Flaws

Apple’s first Mac OS X security update for 2010 is out, providing cover for at least 12 serious vulnerabilities. The update, rated critical, plugs security holes that could lead to code execution vulnerabilities if a Mac user is tricked into opening audio files or surfing to a rigged Web site. Wi...

[slackware-security] gimp

New gimp packages are available for Slackware 12.1, 12.2, 13.0, and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-1570 https://vulners.com/cve/CVE-2009-3909 Here are the...

xpdf/poppler: PSOutputDev:: doImageL1Sep integer overflow

Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0.x, as used in kdegraphics KPDF, might allow remote attackers to execute arbitrary code via a crafted PDF document that triggers a heap-based buffer overflow...

PT-2009-4910 · Microsoft · Office Excel Viewer +27

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 6 SP1 Windows XP SP2 and SP3 Windows Server 2003 SP2 Office XP SP3 Office 2003 SP3 2007 Microsoft Office System SP1 and SP2 Office Project 2002 SP1 Visio 2002 SP2 Office Word Viewer Word Viewer 2003 Gold and SP3...

SuSE9 Security Update : gtk2 (YOU Patch Number 11400)

A denial of service crash condition was fixed in the image handling routines of GTK+. This could be triggered for instance by viewing HTML emails or similar. CVE-2007-0010 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2007:0167)

java-1.5.0-ibm packages that correct a security issue are available for Red Hat Enterprise Linux 5 Supplementary and Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.5.0 Java release includes the IBM Java 2...

CVE-2009-2688

Multiple integer overflows in glyphs-eimage.c in XEmacs 21.4.22, when running on Windows, allow remote attackers to cause a denial of service crash or execute arbitrary code via 1 the tiffinstantiate function processing a crafted TIFF file, 2 the pnginstantiate function processing a crafted PNG...

FreeBSD : xv -- exploitable buffer overflows (fffacc93-16cb-11d9-bc4a-000c41e2cdad)

In a Bugtraq posting, infamous41mdathotpop.com reported : there are at least 5 exploitable buffer and heap overflows in the image handling code. this allows someone to craft a malicious image, trick a user into viewing the file in xv, and upon viewing that image execute arbitrary code under...

Ubuntu Update for imagemagick vulnerabilities USN-422-1

Ubuntu Update for Linux kernel vulnerabilities USN-422-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4221.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for imagemagick vulnerabilities USN-422-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

RedHat Update for gd RHSA-2008:0146-01

Check for the Version of gd OpenVAS Vulnerability Test RedHat Update for gd RHSA-2008:0146-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

RedHat Update for gd RHSA-2008:0146-01

Check for the Version of gd OpenVAS Vulnerability Test RedHat Update for gd RHSA-2008:0146-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

CentOS Update for expect CESA-2008:0134 centos3 x86_64

Check for the Version of expect OpenVAS Vulnerability Test CentOS Update for expect CESA-2008:0134 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...