Ubuntu 16.04 LTS / 18.04 LTS : libjpeg-turbo vulnerabilities (USN-4190-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4190-1 advisory. It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly use this issue to expose sensitive...

USN-4190-1: libjpeg-turbo vulnerabilities

It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2018-14498 It was discovered that libjpeg-turbo incorrectly handled certain...

EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-2160)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,and Phot...

EulerOS 2.0 SP5 : cloud-init (EulerOS-SA-2019-2132)

According to the version of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka...

APSB19-53 Security update available for Adobe Bridge CC

Adobe has released a security update for Adobe Bridge CC. This update addresses multiple vulnerabilities rated Important that occur when parsing malformed SVG images. Successful exploitation could lead to information disclosure in the context of current user...

Zoho ManageEngine OpManager Image Arbitrary File Upload (CVE-2018-18475)

An arbitrary file upload vulnerability exists in Zoho ManageEngine OpManager. The vulnerability is due to insufficient validation of uploaded images. Successful exploitation could result in unrestricted file upload and possible further attacks...

Mobile Window Shopping Climbs, But Sites Are Still Failing Users

This Diwali we saw mobile usage increase 24% over 2018, at the expense of desktop and tablet devices, as mobile shoppers continued to research before buying, even while in a store. At the same time, bounce rates increased, which means shoppers were likely dissatisfied with their experience and...

Mozilla Firefox ESR < 31.4 Multiple Vulnerabilities

Binary data 701250.prm...

LEAD Technologies LEADTOOLS Input Validation Error Vulnerability

LEAD Technologies LEADTOOLS is an image processing development kit from LEAD Technologies. An input validation error vulnerability exists in the BMP header parsing functionality in LEAD Technologies LEADTOOLS. The vulnerability can be exploited to execute arbitrary code with the help of specially...

ALSA-2019:3705 Moderate: libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...

Investintech Able2Extract Professional Memory Corruption Vulnerability

Investintech Able2Extract Professional is a PDF document converter and editor from Investintech Canada. The product supports PDF document scanning, PDF editing and PDF viewing. Investintech Able2Extract Professional suffers from a memory corruption vulnerability that can be exploited by attackers...

Security update for docker-runc (moderate)

openSUSE Security Update: Security update for docker-runc Announcement ID: openSUSE-SU-2019:2434-1 Rating: moderate References: 1152308 Cross-References: CVE-2019-16884 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Pixel Update Bulletin—November 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2019-11-05 or later address all issues in this bulletin and all issues in the November 2019 Android...

OPENSUSE-SU-2019:2418-1 Security update for docker-runc

This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. bsc1152308 This update was imported from the SUSE:SLE-15:Update update project...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM OS Images for Red Hat Linux Systems (July2019 updates)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that are used by the OS Images for IBM Cloud Pak System formerly known as IBM PureApplication System. These issues were disclosed as part of the IBM Java SDK quarterly updates in July 2019. OS Images have addressed th...

SUSE SLES15 Security Update : runc (SUSE-SU-2019:2810-1)

This update for runc fixes the following issues : Security issue fixed : CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. bsc1152308 Non-security issues fixed: Includes upstreamed patches for regressions bsc1131314 bsc1131553. Note that Tenable...

SUSE-SU-2019:2810-1 Security update for runc

This update for runc fixes the following issues: Security issue fixed: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. bsc1152308 Non-security issues fixed: - Includes upstreamed patches for regressions bsc1131314 bsc1131553...

SUSE-SU-2019:2787-1 Security update for docker-runc

This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. bsc1152308...

CAD Mini Home Decor has a memory corruption vulnerability

CAD Mini Home is an interior design CAD software tools, support for WinXp, Win2003, WinVista, Win 7 and other systems. CAD Mini Home Furnishings tool has a memory corruption vulnerability when dealing with BMP images. An attacker can cause the program to crash by constructing a malformed BMP imag...

Memory Corruption Vulnerability in CAD Quick Look Tool

CAD Quick View Tool is a CAD viewing software. CAD Quick Viewer Tool suffers from a memory corruption vulnerability when handling BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, this could result in a denial of service...