11408 matches found
UBUNTU-CVE-2017-11448
The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...
DEBIAN-CVE-2017-11352
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...
UBUNTU-CVE-2017-11352
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...
Memory Corruption Vulnerability in Eggplant Beauty Photo Processing BMP Format Files
Eggflower Beauty Photo is a photo manipulation program. A memory corruption vulnerability exists in Eggflower Beauty Photo's handling of BMP format files. This allows attackers to cause the program to crash by constructing malformed BMP images...
MetInfo Code Execution Vulnerability
MetInfo is a Content Management System CMS developed using PHP and Mysql. An arbitrary code execution vulnerability exists in MetInfo version 5.3.17. A remote attacker can exploit this vulnerability to create PHP scripts with malicious images...
FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-15547)
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the application/core/controller/images.php file in FineCMS 2017-07-12 and earlier versions. A remote attacker can exploit this vulnerability to...
Ubuntu 14.04 LTS / 16.04 LTS : poppler vulnerabilities (USN-3350-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3350-1 advisory. Aleksandar Nikolic discovered that poppler incorrectly handled JPEG 2000 images. If a user or automated system were tricked into opening a...
thefilmlot.com XSS vulnerability
Vulnerable URL: http://thefilmlot.com/tflblogwp/wp-content/plugins/popup-images/popup.php?z=http://thefilmlot.com/tflblogwp/blogimages/Biff07/drunkpubbig.jpg=504=706=%22/%3E%3CsvG/OnLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017...
abc.se XSS vulnerability
Vulnerable URL: https://www.abc.se/kansli/wordpress/wp-content/plugins/popup-images/popup.php/popup.php?z=http://www.abc.se/kansli/wordpress/wp-content/uploads/2007/10/svenwickberg.jpg=269=363=%22/%3E%3CsvG/onLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at...
USN-3350-1 poppler vulnerabilities
Aleksandar Nikolic discovered that poppler incorrectly handled JPEG 2000 images. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or possibly execute arbitrary code with privileges of the user invoking the program. CVE-2017-28...
jolana.cz XSS vulnerability
Vulnerable URL: http://www.jolana.cz/wp-content/plugins/attachment-images/image.php?path=http://www.jolana.cz/images/0220.jpg=Studio+bass=%22/%3E%3CsvG/onLoad=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| XSS...
DEBIAN-CVE-2017-10799
When GraphicsMagick 1.3.25 processes a DPX image with metadata indicating a large width in coders/dpx.c, a denial of service OOM can occur in ReadDPXImage...
UBUNTU-CVE-2017-10799
When GraphicsMagick 1.3.25 processes a DPX image with metadata indicating a large width in coders/dpx.c, a denial of service OOM can occur in ReadDPXImage...
GraphicsMagick 'coders/tiff.c' Buffer Overflow Vulnerability
GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...
GraphicsMagick 'ReadMATImage()' Denial of Service Vulnerability
GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...
UBUNTU-CVE-2016-4383
The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...
[SECURITY] Fedora 26 Update: libmwaw-0.3.11-3.fc26
libmwaw is a library for import of old Mac documents. It supports many kinds of text documents, spreadsheets, databases, vector and bitmap images. Supported are, for example, documents created by BeagleWorks, ClarisWorks, MacPaint, MacWrite or Microsoft Word for Mac. A full list of supported...
Office not Activating in App Layering (incl. MCS Image Prep OS Rearm Failed)
Due to the complexity of Microsoft licensing, App Layering utilizes our own set of scripts to ensure Windows & Office activation. These scripts are a part of the "Citrix App Layering OS Machine Tools," and their misconfiguration is the leading cause of the "Image Preparation OS Rearm Failed" erro...
Buffer Overflow Vulnerability in Multiple Stepok Products Processing TGA Files
Stepok Light Developer is a professional photo post-processing tool.Stepok Recomposit is a Chinese version of the photo compositing software.Stepok RAW Importer is a RAW file conversion software, you can convert RAW photos to JPG images, support for opening and converting most of the digital came...