Mozilla: Heap-buffer-overflow in nsBMPEncoder::AddImageFrame (MFSA 2016-85, MFSA 2016-86)

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

CVE-2016-5278

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the exif.c file in the jhead 2.87 tool, which is used in the libjhead library of the Android operating system, arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using specially crafted EX...

Multiple Apple products WebKit homology policy bypass vulnerability (CNVD-2016-05666)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

CVE-2016-4583

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document...

CVE-2016-4583

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...

The vulnerability of the Thunderbird email client, which allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or trigger service failures by using specially crafted image data...

The vulnerability of the Mozilla SeaMonkey software package allows a malicious individual to execute arbitrary code or perform denial-of-service attacks.

Mozilla SeaMonkey software contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals operating remotely to execute arbitrary code or trigger service failures by using specially crafted image data...

The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or perform a denial-of-service attack

The Mozilla Firefox browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...

The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or trigger a service denial

The Mozilla Firefox browser contains a vulnerability related to errors occurring when memory is used after it is freed in the imgRequestProxy function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, using values of the content types from the image data...

imlib2 integer overflow vulnerability (CNVD-2016-02331)

imlib2 is a general-purpose graphics loading and rendering library. imlib2 fails to properly allocate memory for image data, allowing a local attacker to exploit this vulnerability in an integer overflow attack that could crash an application...

CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

Design/Logic Flaw

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

CVE-2016-0757: Improper Access Control

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

FuseISO Integer Overflow Vulnerability

FuseISO is an open source FUSE module for mounting ISO filesystems such as .iso, .nrg, .bin, .mdf, and .img images, developed by software developer Adam Rimon. An integer overflow vulnerability exists in the 'isofsrealreadzf' function in the isofs.c file in FuseISO 20070708 and earlier versions. ...

openstack-glance: Glance image status manipulation through locations

An authorization vulnerability in OpenStack Image service was discovered, which allowed image-status manipulation using locations. By removing the last location of an image, an authenticated user could change the status from 'active' to 'queue'. A malicious tenant could exploit this flaw to...

Low: Red Hat Security Advisory: openstack-glance security update

Updated openstack-glance packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 7. Red Hat Product Security has rated this update as having a Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...