OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: ImageIO. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

About the security content of watchOS 2.2.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of tvOS 9.2.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Denial Of Service (DoS)

levigo-jbig2-imageio is susceptible to denial of service DoS attacks. The attacks are possible because it does not incorporate other terminating conditions when the user provides malicious input...

CVE-2017-13831

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image...

CVE-2017-13831

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image...

CVE-2017-13814

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image file...

CVE-2017-13814

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image file...

Code injection

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image...

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image file...

CVE-2017-13814

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image file...

CVE-2017-13831

CVE-2017-13831 affects macOS before 10.13.1, in the ImageIO component, where processing a crafted image could lead to information disclosure or a denial of service. The vulnerability is cited in Apple’s macOS High Sierra 10.13.1 security updates and is addressed by updating to macOS 10.13.1 or la...

CVE-2017-13814

Summary: CVE-2017-13814 affects macOS pre-10.13.1, specifically the ImageIO component. A crafted image file may allow remote attackers to execute arbitrary code or cause a denial of service via memory corruption. The issue is described as a memory corruption with input validation concerns in Imag...

CVE-2017-13831

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image...

CVE-2017-13814: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image file...

CVE-2017-13831: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image...

PT-2017-13126

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.1 Description The issue involves the ImageIO component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted image...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-001 and 2017-004)

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - 802.1X - apache - AppleScript - ATS - Audio - CFString - CoreText - curl - Dictionary Widget - file - Font...

Apple macOS High Sierra ImageIO Component Denial of Service Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. imageIO is one of the static methods used to perform common image I/O operations. A denial of service vulnerability exists in the ImageIO component in Apple macOS High Sierra versions prior to 10.13.1....

PT-2017-13141

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.1 Description The issue involves the ImageIO component and allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image. Recommendations For macOS versions prior to...