Computerinsel Photoline PCX Parsing Function Memory Corruption Vulnerability

PhotoLine is a multipurpose image and graphics editor. A memory corruption vulnerability exists in the PCX parsing feature in Computerinsel Photoline 20.53. An attacker can exploit the vulnerability by crafting a PCX image to cause out-of-bounds writes, overwrite arbitrary data, and thus enable...

The vulnerability of the Android operating system’s loader from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system’s loader from the CAF repository is related to insufficient checks on the sizes of headers in compressed load images. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protect...

Memory Corruption Vulnerability in SoftZone Office Handling of BMP Images

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. A memory corruption vulnerability exists in SoftZone Office's handling of BMP images. An attacker can cause the program to crash by...

PT-2018-16281 · Computerinsel · Photoline

Name of the Vulnerable Software and Affected Versions: Computerinsel Photoline version 20.53 Description: A memory corruption issue exists in the PCX-parsing functionality. Processing a specially crafted PCX image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially...

(RHSA-2018:1072) Low: Kubernetes in the Extras channel - deprecation notice

The kubernetes packages provide utilities for container cluster management. Kubernetes and its dependencies will no longer be updated through the Extras channel. Instead, the Red Hat customers are advised to use Red Hat's supported Kubernetes-based products such as Red Hat OpenShift Container...

PT-2018-16233 · Sdl +2 · Sdl2 Image +2

Name of the Vulnerable Software and Affected Versions: SDL2 image version 2.0.2 Description: A code execution issue exists in the XCF image rendering functionality. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can display a...

Apple macOS High Sierra Disk Images Arbitrary Application Launch Vulnerability

Apple macOS High Sierra is a proprietary operating system developed by Apple for Mac computers.Disk Images is one of the components of the Disk Image Format. A security vulnerability exists in the Disk Images component of Apple macOS High Sierra versions prior to 10.13.4. The vulnerability can be...

CVE-2018-4176

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image...

CVE-2018-4176

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image...

Code injection

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image...

CVE-2018-4176

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image...

CVE-2018-4176

CVE-2018-4176 affects macOS before 10.13.4 in the Disk Images component. A crafted disk image can trigger the mounting of a directory as a disk image and cause an associated application to launch, potentially enabling arbitrary code execution. The notable root cause is a logic/validation issue in...

Samsung Mobile Device Gallery Arbitrary Code Execution Vulnerability

Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android L, M and N are different versions of the Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA.Gallery is one of the most popular open source photo management...

DEBIAN-CVE-2018-1093

The ext4validblockbitmap function in fs/ext4/balloc.c in the Linux kernel through 4.15.15 allows attackers to cause a denial of service out-of-bounds read and system crash via a crafted ext4 image because balloc.c and ialloc.c do not validate bitmap block numbers...

Pixel / Nexus Security Bulletin—April 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-04-05 or later address all issues in this bulletin and all issues in the...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-002)

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - ATS - CFNetwork Session - CoreFoundation - CoreTypes - curl - Disk Images - iCloud Drive - Kernel - kext...

macOS 10.13.x < 10.13.4 Multiple Vulnerabilities

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.4. It is, therefore, affected by multiple vulnerabilities in the following components : - Admin Framework - APFS - ATS - CoreFoundation - CoreText - Disk Images - Disk Management - File System Events - iCloud...

[SECURITY] Fedora 28 Update: afflib-3.7.16-4.fc28

AFF=EF=BF=BD=EF=BF=BD is an open and extensible file format designed to sto re disk images and associated metadata. afflib is library for support of the Advanced Forensic Format AFF...

Memory Corruption Vulnerability in AutoDWG DWGSeePro Handling of ICO Files

AutoDWG DWGSeePro is a small and fast dwg file viewer with an interface similar to ACDSee, which allows you to browse, view and print DWG and DXF files. Supports AutoCAD 2006 drawing formats. AutoDWG DWGSeePro has a memory corruption vulnerability when dealing with ICO images, an attacker can cau...

[SECURITY] Fedora 27 Update: afflib-3.7.16-4.fc27

AFF=EF=BF=BD=EF=BF=BD is an open and extensible file format designed to sto re disk images and associated metadata. afflib is library for support of the Advanced Forensic Format AFF...