Remote code execution

A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'...

CVE-2019-1311

A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'...

CVE-2019-1311

IBM Security Bulletin: CVE-2019-1311 is acknowledged within IBM Spectrum Symphony 7.3.1, with an interim fix that upgrades third‑party libraries to address the vulnerability. The bulletin confirms affected product version 7.3.1 and lists a remediation build: sym-7.3.1-build600124. The described C...

CVE-2019-1311: Undefined Security Weakness

A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'...

Microsoft Windows Multiple Vulnerabilities (KB4520011)

This host is missing a critical security update according to Microsoft KB4520011 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4520010)

This host is missing a critical security update according to Microsoft KB4520010 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Windows Imaging API Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an attacker would ha...

PT-2019-3510

Name of the Vulnerable Software and Affected Versions Windows Imaging API affected versions not specified Description The issue is related to the improper handling of objects in memory by the Windows Imaging API, which can be exploited to execute arbitrary code. This can be achieved by using a...

Command Execution Vulnerability in Weining PACS System

The PACS system developed by Weining Health Science and Technology Group Co., Ltd. is widely used as an application system in the medical industry, mainly providing functions such as case query, image processing, and labeling measurement. A command execution vulnerability exists in the Weining PA...

PVS Imaging Wizard Fails With “ Failed to write disk” Message After It Finishes

Imaging Wizard fails with “ Failed to write disk” message after it finishes. The Imaging Wizard logs show: Failed to write disk \\.\PhysicalDrive1. Access is denied. 0x00000005...

GHSA-RJX9-2936-9FFX Improper Input Validation in Apache Sanselan

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

Improper Input Validation in Apache Sanselan

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

GHSA-G99M-3M46-4GM9 Infinite Loop in Apache Sanselan

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

Infinite Loop in Apache Sanselan

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

Denial Of Service (DoS)

Apache commons-imaging previously known as Apache Sanselan is susceptible to denial of service DoS attack. The vulnerability can be triggered by sending some malicious input causing an infinite loop when the input is processed...

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

Code injection

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

CVE-2018-17201

Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...

CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan incubating was renamed to Apache Commons Imaging...