407 matches found
CVE-2020-23884
A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service DoS via a crafted MNG file...
CVE-2020-23884
CVE-2020-23884 affects Nomacs v3.15.0 and is due to a buffer overflow in processing MNG files, leading to a DoS. The connected sources confirm the vulnerability details but do not provide a vendor patch or remediation steps within the supplied documents. No exploitation details or active exploit ...
CVE-2020-23884
A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service DoS via a crafted MNG file...
CVE-2020-23884: Buffer Copy without Checking Size of Input
A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service DoS via a crafted MNG file...
ImageMagick ReadOneMNGImage Infinite Loop DoS
The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created mng file...
imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in EncodePixelGamma
Detailed Report: https://oss-fuzz.com/testcase?key=5819534400421888 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EncodePixelGamma...
CentOS: Security Advisory for qt5-qtimageformats (CESA-2021:2328)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
qt5 security update
CentOS Errata and Security Advisory CESA-2021:2328 An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...
Important: Red Hat Security Advisory: qt5-qtimageformats security update
An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in EncodePixelGamma
Detailed Report: https://oss-fuzz.com/testcase?key=6535490862972928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EncodePixelGamma...
Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
imagemagick:encoder_mng_fuzzer: Use-of-uninitialized-value in EncodePixelGamma
Detailed Report: https://oss-fuzz.com/testcase?key=6556977632247808 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EncodePixelGamma...
MGASA-2021-0115 Updated pngcheck packages fix security vulnerabilities
This update fixes a buffer-overrun bug related to the MNG LOOP chunk which gets noticed even in PNG files if the -s option is used. RHBZ1908559. It also fixes a buffer overrun for certain invalid MNG PPLT chunk contents. RHBZ1907428...
Updated pngcheck packages fix security vulnerabilities
This update fixes a buffer-overrun bug related to the MNG LOOP chunk which gets noticed even in PNG files if the -s option is used. RHBZ1908559. It also fixes a buffer overrun for certain invalid MNG PPLT chunk contents. RHBZ1907428...
PT-2021-30840
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue involves a buffer-overrun bug related to the MNG LOOP chunk, which can be detected even in PNG files when the -s option is used. Additionally,...
graphicsmagick:coder_MNG_fuzzer: Heap-buffer-overflow in ReadMNGImage
Detailed Report: https://oss-fuzz.com/testcase?key=4580215097524224 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMNGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6060000000be Crash State: ReadMNGImage ReadImage...
[SECURITY] Fedora 32 Update: pngcheck-2.4.0-7.fc32
pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...
FreeBSD : pngcheck -- Buffer-overrun vulnerability (13ca36b8-6141-11eb-8a36-7085c2fb2c14)
The libpng project reports : pngcheck versions 3.0.0 and earlier have a pair of buffer-overrun bugs related to the sPLT and PPLT chunks the latter is a MNG-only chunk, but it gets noticed even in PNG files if the -s option is used. Both bugs are fixed in version 3.0.1, released on 24 January 2021...
pngcheck -- Buffer-overrun vulnerability
The libpng project reports: pngcheck versions 3.0.0 and earlier have a pair of buffer-overrun bugs related to the sPLT and PPLT chunks the latter is a MNG-only chunk, but it gets noticed even in PNG files if the -s option is used. Both bugs are fixed in version 3.0.1, released on 24 January 2021...
[SECURITY] Fedora 32 Update: pngcheck-2.3.0-4.fc32
pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...