CVE-2017-8785

FastStone Image Viewer 6.2 is affected by a vulnerability in FSViewer.exe triggered by malformed JPEG 2000 files, described as “Data from Faulting Address may be used as a return value.” The issue could allow a DoS (Access Violation) and potentially other impact. The available documents confirm t...

CVE-2017-8826

FastStone Image Viewer 6.2 is affected by a vulnerability described as a “User Mode Write AV” that can be triggered by processing a malformed JPEG file. The issue is linked to the jpeg_mem_term function in jmemnobs.c of libjpeg and can be exploited by a malformed JPEG that causes an access violat...

IrfanView Denial of Service Vulnerability

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. IrfanView suffers from a denial of service vulnerability. An attacker can exploit this vulnerability to cause ...

IrfanView FPX Plugin Security Bypass Vulnerability

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security bypass vulnerability exists in IrfanView version 4.44 32bit prior to FPX plugin 4.45. An attacker c...

feh 'src/wallpaper.c' integer overflow vulnerability

feh is an image viewing tool on the Linux command line. An integer overflow vulnerability exists in the wallpaper.c file in versions of feh prior to 2.18.3. An attacker could exploit this vulnerability to cause a denial of service out-of-bounds heap read...

[SECURITY] [DLA 899-1] feh security update

Package : feh Version : 2.3-2+deb7u1 CVE ID : CVE-2017-7875 Debian Bug : 860367 Tobias Stoeckmann discovered it was possible to trigger an out-of-boundary heap write with the image viewer feh while receiving an IPC message. For Debian 7 "Wheezy", these problems have been fixed in version...

Horos 2.1.0 Cross Site Scripting

Horos 2.1.0 Web Portal DOM Based XSS Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: HorosaC/ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical image viewer for OS X...

Horos 2.1.0 Cross Site Scripting Vulnerability

Exploit for macOS platform in category dos / poc Horos 2.1.0 Web Portal DOM Based XSS Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: HorosaC/ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully...

Horos 2.1.0 Web Portal DOM Based XSS

Summary Horos™ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical image viewer for OS X. Horos is based upon OsiriX and other open source medical imaging libraries. Description Horos suffers from a DOM-based XSS vulnerabili...

Horos 2.1.0 DICOM Medical Image Viewer - Denial of Service

Horos 2.1.0 DICOM Medical Image Viewer - Denial of Service !/usr/bin/env python -- coding: utf8 -- Horos 2.1.0 DICOM Medical Image Viewer Remote Memory Overflow Vulnerability Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: Horos™ is an...

Horos 2.1.0 DICOM Medical Image Viewer Remote Memory Overflow Vulnerability

Summary Horos™ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical image viewer for OS X. Horos is based upon OsiriX and other open source medical imaging libraries. Description The vulnerability is caused due to the usage o...

Horos 2.1.0 Web Portal - Directory Traversal

Horos 2.1.0 Web Portal Remote Information Disclosure Exploit Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: Horos™ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical...

Horos 2.1.0 Web Portal Remote Information Disclosure / Directory Traversal

Horos 2.1.0 Web Portal Remote Information Disclosure Exploit Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: HorosaC/ is an open-source, free medical image viewer. The goal of the Horos Project is to develop a fully functional, 64-bit medical...

Horos 2.1.0 DICOM Medical Image Viewer - Denial of Service

!/usr/bin/env python -- coding: utf8 -- Horos 2.1.0 DICOM Medical Image Viewer Remote Memory Overflow Vulnerability Vendor: Horos Project Product web page: https://www.horosproject.org Affected version: 2.1.0 Summary: Horos™ is an open-source, free medical image viewer. The goal of the Horos...

[SECURITY] Fedora 23 Update: eog-3.18.3-1.fc23

The Eye of GNOME image viewer eog is the official image viewer for the GNOME desktop. It can view single image files in a variety of formats, as well as large image collections. eog is extensible through a plugin system...

[SECURITY] Fedora 24 Update: eog-3.20.4-1.fc24

The Eye of GNOME image viewer eog is the official image viewer for the GNOME desktop. It can view single image files in a variety of formats, as well as large image collections. eog is extensible through a plugin system...

David Image Viewer DLL Hijacking Vulnerability

David Image Viewer is a powerful digital image viewing, auxiliary processing software. It supports more than 30 popular formats. The software has a typical dll hijacking vulnerability that allows attackers to execute arbitrary code using this vulnerability...

[SECURITY] Fedora 24 Update: w3m-0.5.3-24.fc24

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

GpicView 0.2.5 - Crash (PoC)

Exploit for linux platform in category dos / poc !/usr/bin/python Exploit Title: GpicView Buffer Overflow DOS Date: 25th February 2016 Exploit Author: David Silveiro Xino.co.uk Vendor Homepage: lxde.sourceforge.net/gpicview/ Software Link:...

UEFI firmware image viewer and editor: UEFITool

It supports parsing of full BIOS images starting with the flash descriptor or any binary files containing UEFI volumes. Original development was started here at MDL forums as a cross-platform analog to PhoenixTool ‘s structure mode with some additional features, but the program’s engine was prove...