OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)

It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...

iOS Mac OS X Code Execution

The vulnerability of the ImageIO component in the iOS operating system and the Mac OS X operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory...

Buffer overflow

Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted image...

CVE-2010-1816

Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted image...

CVE-2010-1816

CVE-2010-1816 is a vulnerability in Apple ImageIO on Mac OS X 10.6 to 10.6.3 (and Mac OS X Server 10.6 to 10.6.3). The issue is a buffer overflow in ImageIO that could allow a remote attacker to execute arbitrary code or cause a denial of service by crafting a image file. Connected sources (inclu...

CVE-2010-1816

Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted image...

CVE-2010-1816: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted image...

PT-2017-2102

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6 through 10.6.3 Apple Mac OS X Server versions 10.6 through 10.6.3 Description The issue is caused by a buffer overflow in the ImageIO class, allowing remote attackers to execute arbitrary code or cause a denial of...

iOS Mac OS X Code Execution

The vulnerability of the ImageIO component in iOS and Mac OS X operating systems arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption, application...

iOS Mac OS X Code Execution

The vulnerability of the ImageIO component in the iOS and Mac OS X operating systems arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption, application...

Apple TV < 10.2 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10.2. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in LibTIFF in the DumpModeEncode function within file tifdumpmode.c. An unauthenticated, remote attacker can exploi...

iOS/macOS Remote code execution triggered by malformed GIF in ImageIO framework（CVE-2017-2416）

ImageIO Available for: iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation and later Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved input validation. CVE-2017-2416:...

Apple iOS/tvOS/macOS/watchOS Denial of Service Vulnerability (CNVD-2017-04932)

iOS is a mobile operating system developed by Apple Inc. First announced at Macworld on January 9, 2007, it was initially designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the operating syste...

Apple iOS/tvOS/macOS/watchOS Denial of Service Vulnerability (CNVD-2017-04862)

iOS is a mobile operating system developed by Apple Inc. First announced at Macworld on January 9, 2007, the system was originally designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is an operati...

CVE-2017-2467

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2467

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2432

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2416

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2432

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of...