SUSE-SU-2016:1784-1 Security update for ImageMagick

ImageMagick was updated to fix 66 security issues. These security issues were fixed: - CVE-2014-9810: SEGV in dpx file handler. bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9812: NULL pointer dereference in ps file handling bsc984137. - CVE-2014-9813: Crash on...

The vulnerability of the Adobe Photoshop graphic editor, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Adobe Photoshop graphic editor arises due to an overflow of memory in the dynamic memory. Exploiting this vulnerability allows a local attacker to execute arbitrary code or cause a service failure...

The vulnerability of the Apache HTTP Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The status of the competition in the modstatus module of the Apache HTTP Server allows malicious actors operating remotely to trigger service failures overflow of buffers in dynamic memory, gain access to confidential information, or execute arbitrary code through a specially crafted request. Thi...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the core/fxge/ge/fxgetext.cpp file of the Google Chrome browser’s PDFium component is related to the improper handling of certain index values. Exploiting this vulnerability can allow an attacker to trigger a service failure memory overflow during reading using a specially...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the CPDFDIBSource::CreateDecoder function located in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in the PDFium browser component of Google Chrome is related to improper handling of initialization errors. Exploiting this vulnerability can allow an attacker to trigger a...

V8 browser kernel vulnerability, which allows a hacker to trigger a service failure

The vulnerability of the regexp implementation in the V8 browser kernel is related to incorrect handling of string lengths. Exploiting this vulnerability can allow an attacker, operating remotely, to trigger a service failure memory overflow, by using specially crafted JavaScript code...

The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.

The vulnerability of the exifprocessIFDTag function ext/exif/exif.c in the PHP interpreter exists due to incorrect checking of arguments for the spprintf function. Exploiting this vulnerability can allow a malicious actor to trigger a service failure memory overflow or potentially cause other...

The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.

The vulnerability of the exifprocessIFDinJPEG function ext/exif/exif.c in the PHP interpreter improperly checks the size of the IFD file. Exploiting this vulnerability may allow a malicious actor to trigger a service failure memory overflow or potentially cause other effects through specially...

spice: heap-based memory corruption within smartcard handling

A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice's smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code wit...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to buffer overflow in dynamic memory. Exploiting these vulnerabilities can allow a malicious actor to execu...

[SECURITY] [DLA 474-1] dosfstools security update

Package : dosfstools Version : 3.0.13-1+deb7u1 CVE IDs : CVE-2015-8872 CVE-2016-4804 It was discovered that there was an invalid memory and heap overflow vulnerability in dosfstools, a collection of utilities for making and checking MS-DOS FAT filesystems. For Debian 7 "Wheezy", this issue has be...

DLA-474-1 dosfstools - security update

Bulletin has no description...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or obtain confidential information.

The vulnerability in the fxcodec/codec/fxCodecJpj.cpp function of the Google Chrome browser’s PDFium component is related to the incorrect implementation of the sycc420toRGB and sycc422toRGB functions. Exploiting this vulnerability can allow an attacker to obtain confidential information or cause...

The vulnerability of the FreeBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the amd64setldt function sys/amd64/amd64/sysmachdep.c in the FreeBSD operating system is caused by an overflow in the dynamic memory buffer. Exploiting this vulnerability can allow a local attacker to trigger a system failure kernel crash through the system call i386setldt...

The vulnerability of the optimization software for PNG OptiPNG allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the bmpreadrows function in the PNG OptiPNG optimization software is caused by buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure memory out-of-bound reading, unexpected system termination, or execute arbitrar...

The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure

The vulnerability of the putcontig8bitCIELab function in the LibTIFF library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure memory overflow during reading by using a compressed TIFF image...

The vulnerability of the free implementation of the DHCP client dhcpcd allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the free implementation of the DHCP client dhcpcd arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a corrupted DHCP response...

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime allow attackers to execute arbitrary code.

The vulnerabilities of the software platforms Flash Player, Flash Player ESR, and Adobe Integrated Runtime are caused by an overflow in the dynamic memory buffer. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

The vulnerability of the set of libraries for Network Security Services allows a perpetrator to execute arbitrary code.

The vulnerability of the Network Security Services library is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted ASN.1 data within X.509 certificates...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to cause a service failure.

The vulnerability of the libstagefright library in Thunderbird email clients, as well as in Firefox and Firefox ESR browsers, is due to buffer overflows. Exploiting this vulnerability allows a malicious actor to cause a service failure memory consumption by using an MPEG-4 file that initiates the...