GHSA-VJCJ-5G2R-VXQC Pandao editor.md vulnerable to XSS in IMG attributes

Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element...

GraphicsMagick coders/png.c file denial of service vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in ReadOneJNGImage in the coders/png.c file in GraphicsMagick version 1.3.26, which stems from the program failing to properl...

CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

CVE-2011-2772

The getdatarootimagepath function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files, which allows remote attackers to cause a denial of service memory consumption via a 1 large or 2 invalid image...

CVE-2010-2649

Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service application crash via an invalid image...

Code injection

Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service application crash via an invalid image...

CVE-2010-2649

Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service application crash via an invalid image...

CVE-2010-2649

Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service application crash via an invalid image...

CVE-2010-2649

Google Chrome 5.0.375.99 and prior versions are affected by multiple vulnerabilities including invalid image handling that can crash the browser or potentially allow memory corruption. Public sources (OpenVAS entries and Seebug summary) describe a set of issues in July 2010 across WebGL bounds ch...

CVE-2010-2649

Removed by vendor...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms...

CVE-2009-0007

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms...

Buffer overflow

Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header. NOTE: the related issue in Photoshop CS3 is already covered...

CVE-2008-1765

Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header. NOTE: the related issue in Photoshop CS3 is already covered...