OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)

It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...

About the security content of tvOS 9.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

About the security content of watchOS 2.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)

It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...

OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)

It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data 9847.prm...

Multiple Apple Products ImageIO Component Memory Leak Vulnerability

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system. imageIO is one of the static methods used to perform common image I/O operations. A security vulnerability exists in the ImageIO component ...

Mac OS X 10.x < 10.12.2 Multiple Vulnerabilities

Binary data 9840.prm...

macOS 10.12.x < 10.12.2 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppleGraphicsPowerManagement - Assets - Audio - Bluetooth - CoreCapture - CoreFoundation - CoreGraphics - CoreMedia...

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data appleios102check.nbin...

Apple macOS Sierra ImageIO Arbitrary Code Execution Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers. imageIO is one of the static methods used to perform common image I/O operations. An arbitrary code execution vulnerability exists in ImageIO in Apple macOS Sierra versions prior to 10.12.1. A remote attack...

Mac OS X 10.x < 10.12.1 Multiple Vulnerabilities

Binary data 9758.prm...

Apple macOS Sierra ImageIO Cross-Border Read Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers. imageIO is one of the static methods used to perform common image I/O operations. An out-of-bounds read vulnerability exists in the SGI image parsing in Apple macOS Sierra ImageIO. An attacker can exploit...

Apple macOS Sierra ImageIO Over-the-Border Write Vulnerability

Apple macOS Sierra is a specialized operating system developed for Mac computers. An out-of-bounds write vulnerability exists in ImageIO in Apple macOS Sierra, which allows local attackers to exploit the vulnerability to build malicious PDFs that can be tricked into parsing by an application,...

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

Mac OS X Code Execution

The vulnerability of the ImageIO service in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption by using the specially crafted xStride and yStride values in the E...

operating systems such as

The vulnerability of the ImageIO component in operating systems such as Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to trigger a service failure memory consumption by using undefined vectors...

Mac OS X iOS DoS Execution Arbitrary Code

The vulnerability of the ImageIO component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially created TIFF file...

Mac OS X Code Execution

The vulnerability of the ImageIO component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted EXR image with B44...

Security update for java-1_8_0-openjdk (important)

This update for java-180-openjdk fixes the following issues: - Upgrade to version jdk8u101 icedtea 3.1.0 - New in release 3.1.0 2016-07-25: Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 -...