Debian Security Advisory DSA 2744-1 (tiff - several vulnerabilities)

Pedro Ribeiro and Huzaifa S. Sidhpurwala discovered multiple vulnerabilities in various tools shipped by the tiff library. Processing a malformed file may lead to denial of service or the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2744.nasl 6611 2017-07-07 12:07:20Z cfischer ...

Fedora Update for libtiff FEDORA-2013-14707

Check for the Version of libtiff OpenVAS Vulnerability Test Fedora Update for libtiff FEDORA-2013-14707 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Double free

Multiple double free vulnerabilities in the LibRaw::unpack function in librawcxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed full-color 1 Foveon or 2 sRAW image file...

CVE-2013-2126

Multiple double free vulnerabilities in the LibRaw::unpack function in librawcxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed full-color 1 Foveon or 2 sRAW image file...

CVE-2013-2126

Multiple double free vulnerabilities in the LibRaw::unpack function in librawcxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed full-color 1 Foveon or 2 sRAW image file...

Microsoft DirectShow 远程代码执行漏洞(CVE-2013-3174)

BUGTRAQ ID: 60979 CVECAN ID: CVE-2013-3174 DirectShow是微软公司在ActiveMovie和Video for Windows的基础上推出的新一代基于COMComponent Object Model的流媒体处理开发包，与DirectX开发包一起发布。 Microsoft DirectShow 分析 GIF 图像文件的方式中存在一个远程执行代码漏洞。如果用户打开特制 GIF...

MS13-056: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2845187)

The remote Windows host is potentially affected by a vulnerability that could allow remote code execution if a user opens a malicious image file. Successful exploitation of this vulnerability could allow an attacker to gain the same user rights as the local user. C Tenable Network Security, Inc...

Stack overflow

Stack-based buffer overflow in the t2pwritepdfpage function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service application crash via a crafted image length and resolution in a TIFF image file...

CVE-2013-1961

Stack-based buffer overflow in the t2pwritepdfpage function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service application crash via a crafted image length and resolution in a TIFF image file...

CVE-2013-1960

CVE-2013-1960: A heap-based buffer overflow in libtiff’s tiff2pdf component (t2p_process_jpeg_strip) can crash or allow possible code execution via a crafted TIFF image. Affected: libtiff/tiff2pdf. Impact: denial of service and potential RCE as described in multiple advisories. Remediation: upgra...

CVE-2013-1960

Heap-based buffer overflow in the t2pprocessjpegstrip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image file...

CVE-2013-1960

Heap-based buffer overflow in the t2pprocessjpegstrip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image file...

Important: Red Hat Security Advisory: spice-vdagent-win security and bug fix update

An update for spice-vdagent-win that fixes one security issue and several bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

CVE-2013-1960

Heap-based buffer overflow in the t2pprocessjpegstrip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image file...

Cisco IOS Smart Install Configuration File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco IOS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Smart Install client. A specially crafted packet can be sent to the SMI IBC server to...

Apple QuickTime Player 7.7.3 Out Of Bounds

Title: Apple Quick Time Player WindowsVersion 7.7.3 Out of Bound Read Date: 28th January,2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Vendor Homepage: http://www.apple.com/ Software Link: http://www.apple.com/quicktime/download/ Version: Apple Quick...

Scientific Linux Security Update : gtk2 on SL5.x i386/x86_64 (20130108)

An integer overflow flaw was found in the X BitMap XBM image file loader in GTK+. A remote attacker could provide a specially crafted XBM image file that, when opened in an application linked against GTK+ such as Nautilus, would cause the application to crash. CVE-2012-2370 This update also fixes...

RedHat Update for gtk2 RHSA-2013:0135-01

Check for the Version of gtk2 OpenVAS Vulnerability Test RedHat Update for gtk2 RHSA-2013:0135-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

gtk2 security update

CentOS Errata and Security Advisory CESA-2013:0135 Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...

RHEL 5 : gtk2 (RHSA-2013:0135)

Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...