Xen map_grant_ref elevation of privilege vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. A security vulnerability in Xen mapgrantref allows attackers to submit a specially crafted request to gain host privileges and perform unauthorized operations...

CVE-2017-11255

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF color map data. Successful exploitation could lead to arbitrary...

CVE-2017-11255

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF color map data. Successful exploitation could lead to arbitrary...

CVE-2017-11255: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF color map data. Successful exploitation could lead to arbitrary...

ImageMagick memory leak vulnerability (CNVD-2017-21012)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'WriteMAPImage' function in the coders/map.c file in ImageMagick version...

PT-2017-11861

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2017.009.20058 and earlier Adobe Acrobat Reader versions 2017.008.30051 and earlier Adobe Acrobat Reader versions 2015.006.30306 and earlier Adobe Acrobat Reader version 11.0.20 and earlier Description The issue i...

UBUNTU-CVE-2017-12663

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c...

DEBIAN-CVE-2017-12663

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c...

DEBIAN-CVE-2017-7890

The GIF decoding function gdImageCreateFromGifCtx in gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read 700 bytes from the top of the...

ALPINE-CVE-2017-7890

The GIF decoding function gdImageCreateFromGifCtx in gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read 700 bytes from the top of the...

PT-2017-2782

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue is related to insufficient access control in the mm.c component of the Xen hypervisor, allowing local PV guest OS users to gain host OS privileges. This can be achieved through vectors...

PT-2017-11934

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue allows local guest OS privileged users to cause a denial of service, resulting in out-of-bounds access and a guest instance crash. This is achieved by leveraging the use of qemu map ra...

Qemu: virtio: null pointer dereference in virtqueu_map_desc

The virtqueuemapdesc function in hw/virtio/virtio.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service NULL pointer dereference and QEMU process crash via a large I/O descriptor buffer length value...

Qemu: virtio: null pointer dereference in virtqueu_map_desc

The virtqueuemapdesc function in hw/virtio/virtio.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service NULL pointer dereference and QEMU process crash via a large I/O descriptor buffer length value...

gtk-vnc: Integer overflow when processing SetColorMapEntries

An integer overflow flaw was found in gtk-vnc. A remote malicious VNC server could use this flaw to crash VNC viewers which are based on the gtk-vnc library...

Reflected Cross-Site Scripting Vulnerability in ZYCHCMS V06 /Include/map.asp Page

ZYCHCMS is an enterprise website management system. A reflective cross-site scripting vulnerability exists in the ZYCHCMS V06 /Include/map.asp page. The vulnerability allows an attacker to construct an XSS statement and perform pop-up box operations to obtain sensitive information such as user...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-19975)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'WriteMAPImage' function in the coders/map.c file in GraphicsMagick version 1.3.26. An attacker can exploit...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-19977)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'WriteMAPImage' function in the coders/map.c file in GraphicsMagick version 1.3.26. An attacker can exploit...

UBUNTU-CVE-2017-11638

GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642...

DEBIAN-CVE-2017-11642

GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638...