Memory Corruption Vulnerability in EximiousSoft GIF Creator v7.31 Processing BMP Images (CNVD-2017-36511)

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the BMP format. An attacker can cause the program to crash by constructing a malformed BMP image...

EximiousSoft GIF Creator v7.31 Memory Corruption Vulnerability in Processing BMP Images

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the BMP format. An attacker can cause the program to crash by constructing a malformed BMP image...

EximiousSoft Banner Maker v5.45 Handles PNG with Memory Corruption Vulnerability

EximiousSoft Banner Maker is an image manipulation tool. EximiousSoft Banner Maker suffers from a memory corruption vulnerability when processing the PNG format. An attacker can cause the program to crash or lead to arbitrary code execution by constructing malformed PNG images...

[SECURITY] Fedora 26 Update: jbig2dec-0.14-1.fc26

jbig2dec is a decoder implementation of the JBIG2 image compression format. JBIG2 is designed for lossy or lossless encoding of 'bilevel' 1-bit monochrome images at moderately high resolution, and in particular scanned paper documents. In this domain it is very efficient, offering compression...

[SECURITY] Fedora 27 Update: jbig2dec-0.14-1.fc27

jbig2dec is a decoder implementation of the JBIG2 image compression format. JBIG2 is designed for lossy or lossless encoding of 'bilevel' 1-bit monochrome images at moderately high resolution, and in particular scanned paper documents. In this domain it is very efficient, offering compression...

Product update: Virtuozzo 7.0 Update 6 (7.0.6-635)

The Update 6 for Virtuozzo 7.0 provides new features, security fixes as well as stability and usability bug fixes. Vulnerability id: PSBM-69459 Downloadable ISO images of Virtuozzo as well as their MD5 and SHA256 checksums can now be verified against the GPG key stored at a secure location. For...

[SECURITY] Fedora 27 Update: ImageMagick-6.9.9.22-1.fc27

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16412)

An out-of-bounds read vulnerability exists in the XPS component of Adobe Acrobat. The vulnerability is due to improper handling of embedded JPEG images in an XPS document. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted XPS document...

Adobe Acrobat Pro DC XPS PNG tEXT Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat Pro DC XPS TIFF Rational Data Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16382)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to improper validation of embedded TIFF images in a XPS file. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted webpage or a maliciously crafted XPS...

Adobe Acrobat Pro DC XPS JPEG APP2 Parsing Heap-based Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Adobe Acrobat Pro DC XPS JPEG APP13 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2017-13814

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted image file...

Denial of Service Vulnerability in Kingsoft WPS

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in Kingsoft WPS, which is caused due to abnormal data not being handled properly in the conversion of the color space sycc422 or sycc420 to rgb in jpx images. An attack...

Android Security Bulletin—November 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2017-11-06 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners were...

Design/Logic Flaw

The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service ImportIndexQuantumType invalid write and application crash or possibly have unspecified other impact via a malformed WPG ima...

CVE-2017-16545

The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service ImportIndexQuantumType invalid write and application crash or possibly have unspecified other impact via a malformed WPG ima...

CVE-2017-16545

The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service ImportIndexQuantumType invalid write and application crash or possibly have unspecified other impact via a malformed WPG ima...

DEBIAN-CVE-2017-16545

The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service ImportIndexQuantumType invalid write and application crash or possibly have unspecified other impact via a malformed WPG ima...