1118 matches found
CVE-2018-3923
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability...
PT-2018-16315 · Computerinsel · Computerinsel Photoline
Name of the Vulnerable Software and Affected Versions: Computerinsel Photoline version 20.54 Description: A memory corruption issue exists in the PCX-parsing functionality. Processing a specially crafted PCX image can lead to an out-of-bounds write, allowing an attacker to overwrite arbitrary dat...
[SECURITY] Fedora 28 Update: libpng10-1.0.69-5.fc28
The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...
[SECURITY] Fedora 27 Update: libpng10-1.0.69-5.fc27
The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...
CVE-2018-3860
An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability...
ACD Systems Canvas Draw 4 Resolution_Set Out of Bounds Write Code Execution Vulnerability
Summary An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this...
ACD Systems Canvas Draw 4 Invert Map Out-of-Bounds Write Code Execution Vulnerability
Summary An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...
PT-2018-16252 · Acd Systems · Canvas Draw
Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: A heap overflow exists in the TIFF parsing functionality. A specially crafted TIFF image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to execute co...
UBUNTU-CVE-2018-14436
ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c...
DEBIAN-CVE-2018-12648
The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBPSupport.hpp in Exempi 2.4.5 has a NULL pointer dereference...
ImageMagick out-of-bounds write vulnerability (CNVD-2018-12317)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. An out-of-bounds write vulnerability exists in ReadBMPImage and WriteBMPImage in coders/bmp.c in ImageMagick 7.0.8-3 Q16. An attacker can cause an out-of-bounds write ...
FastStone Image Viewer Denial of Service Vulnerability (CNVD-2018-14268)
FastStone Image Viewer is an image viewer that supports image browsing, format conversion, editing and more. A security vulnerability exists in FastStone Image Viewer version 6.2, which originates from the FSViewer.exe program failing to properly handle malformed JPEG files. An attacker can explo...
[SECURITY] Fedora 28 Update: libtiff-4.0.9-10.fc28
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...
Free Lossless Image Format Denial of Service Vulnerability (CNVD-2018-11452)
Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'TransformPaletteC::process' function in the transform/paletteC.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability to cause a denial of servic...
CVE-2018-12109
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...
CVE-2018-12109
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...
CVE-2018-12109
CVE-2018-12109 affects Free Lossless Image Format (FLIF) 0.3. The vulnerability is in the TransformPaletteC::process function within transform/palette_C.hpp, where crafted PAM image files can trigger a heap-based buffer overflow, leading to a denial of service (application crash) and possibly oth...
Little CMS Out-of-Bounds Write Vulnerability
Little CMS is a small color management engine. An out-of-bounds write vulnerability exists in the cmsPipelineCheckAndRetreiveStages function in liblcms2.a in cmslut.c in tificc in Little CMS 2.9. An attacker can exploit this vulnerability to cause an out-of-bounds write via a specially crafted TI...