Free Lossless Image Format (FLIF) Long Loop Vulnerability

FLIF is a lossless image format based on MANIAC compression. A long loop vulnerability exists in imageloadpnm in image/image-pnm.cpp in Free Lossless Image Format FLIF version 0.3. An attacker can exploit this vulnerability to cause resource exhaustion...

Free Lossless Image Format Denial of Service Vulnerability (CNVD-2018-09372)

Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'Plane' function of the image/image.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability with a specially crafted file to cause a denial of...

CVE-2018-10972

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

CVE-2018-10971

An issue was discovered in Free Lossless Image Format FLIF 0.3. The Plane function in image/image.hpp allows remote attackers to cause a denial of service attempted excessive memory allocation via a crafted file...

CVE-2018-10972

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

CVE-2018-10971

CVE-2018-10971 affects Free Lossless Image Format (FLIF) 0.3. The Plane function in image/image.hpp is vulnerable to crafted FLIF files that trigger a denial of service via attempted excessive memory allocation. Documented impact indicates availability impact (PARTIAL to HIGH in CVSS), with local...

CVE-2018-10972

The CVE-2018-10972 entry concerns Free Lossless Image Format (FLIF) 0.3. The vulnerability lies in the TransformPaletteC::process function (transform/palette_C.hpp), which can be triggered by a crafted file to cause a heap-based buffer overflow and denial of service. The available connected docum...

Lepton parent parameter SQL injection vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton parent parameter, which could allow an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlying database...

Lepton Open Redirect Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. Lepton suffers from an open redirection vulnerability that can be exploited by an attacker to redirect a user to an arbitrary website to conduct a phishing attack...

Lepton memory corruption vulnerability (CNVD-2016-05182)

Lepton is a set of tools for lossless compression of JPEG format files. A memory corruption vulnerability exists in Lepton, which can be exploited by attackers to obtain sensitive information and cause a denial of service...