Poppler Integer Overflow Vulnerability

Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. An integer overflow vulnerability exists in the JPEG 2000 image parsing feature in Poppler version 0.53.0. An attacker can exploit this vulnerability to overwrite the heap across boundaries and execu...

Nitro Pro Denial of Service Vulnerability

Nitro Pro is a U.S. company Nitro PDF production and management software. A security vulnerability exists in Nitro Pro 11.0.3 and earlier versions. A remote attacker could exploit this vulnerability with a specially crafted PCX file to cause a denial of service...

PT-2017-15558 · Poppler +2 · Poppler +2

Name of the Vulnerable Software and Affected Versions: Poppler version 0.53.0 Description: An integer overflow issue exists in the JPEG 2000 image parsing functionality. A specially crafted PDF file can cause an integer overflow, leading to out of bounds memory overwrite on the heap, potentially...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-21798)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

IrfanView FPX plugin buffer overflow vulnerability (CNVD-2017-15690)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in IrfanView...

CVE-2017-8826

FastStone Image Viewer 6.2 has a "User Mode Write AV" issue, possibly related to the jpegmemterm function in jmemnobs.c in libjpeg. This issue can be triggered by a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly...

JapsPer pointer undefined vulnerability analysis-vulnerability warning-the black bar safety net

0×01: introduction JapsPer project is an open source project, it provides a method based on the jpeg-2000 part of the standard. This project was originally developed by Image Power and University of British Columbia collaboration. Currently, the ongoing JapsPer software maintenance and developmen...

Silicon Graphics LibTIFF 'TIFFWriteDirectoryTagCheckedLong8Array' Function Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in the 'TIFFWriteDirectoryTagCheckedLong8Array' function in...

[SECURITY] Fedora 26 Update: mingw-libtiff-4.0.8-1.fc26

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

Memory Corruption Vulnerability in Light Developer's Handling of BMP Formats

Stepok Light Developer is a professional photo post-processing tool with features that cover most of the needs of photography enthusiasts. Light Developer handles BMP format memory corruption vulnerability, attackers can use the vulnerability to construct deformed BMP files can lead to program...

UBUNTU-CVE-2017-9261

In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service memory leak via a crafted file...

AutoTrace heap buffer overflow vulnerability (CNVD-2017-08506)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap buffer overflow vulnerability exists in the 'ReadImage' function in input-tga.c:620:27 of the libautotrace.a file in AutoTrace version 0.31.1. An attacker can exploit this vulnerability to cause a hea...

ImageMagick Denial of Service Vulnerability (CNVD-2017-07524)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial-of-service vulnerability vulnerability exists in the 'WriteBlob' function of the MagickCore/blob.c file in...

PT-2017-18776 · None +2 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function. This function is located in the input-tga.c file. The estimated number of...

jasper: out-of-bounds read in jpc_pi_nextcprl()

The jpcpinextcprl function in JasPer 1.900.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...

DEBIAN-CVE-2017-8356

In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service memory leak via a crafted file...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of JPEG 2000 components in programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, is related to reading beyond the buffer limit and memory corruption due to image scaling. Exploiting this...

The vulnerability of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allows a perpetrator to execute arbitrary code.

The vulnerability of the image conversion tool for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises due to an operation going beyond the buffer in memory, resulting in transformations of TIFF files. Exploitin...

[SECURITY] Fedora 24 Update: libpng12-1.2.57-1.fc24

The libpng12 package provides libpng 1.2, an older version of the libpng library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

[SECURITY] Fedora 25 Update: libtiff-4.0.7-5.fc25

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...