417 matches found
ImageMagick Denial of Service Vulnerability (CNVD-2017-21001)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadOneMNGImage' function in the coders/png.c file in ImageMagick...
DEBIAN-CVE-2017-12640
ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c...
UBUNTU-CVE-2017-12565
In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service...
DEBIAN-CVE-2017-12565
In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service...
GraphicsMagick 'WriteOnePNGImage' Function Denial of Service Vulnerability
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'WriteOnePNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. A remote attacker can...
DEBIAN-CVE-2017-11139
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
The vulnerability of the PNG image analyzer in the Flash Player software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the PNG image analyzer in the Flash Player software is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
CVE-2017-8400
In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c:755. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution...
The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure
The vulnerability of the SpliceImage function in the console-based image editing tool ImageMagick is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure application termination by using a specially created PNG file...
pngdefry 'pngdefry.c' heap buffer overflow vulnerability
pngdefry is a suite of applications for iPhone and iPad to modify PNG images. A heap buffer overflow vulnerability exists in pngdefry 2017-03-22 and earlier versions. Due to the program failing to properly handle specially crafted png files. An attacker could exploit the vulnerability to cause a...
OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...
OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...
[SECURITY] Fedora 25 Update: libpng-1.6.27-1.fc25
The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...
The vulnerability of the libpng library, which allows a hacker to execute arbitrary code
The vulnerability of the pngcombinerow function in the libpng library arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted PNG file...
The vulnerability of the libpng library, which allows a hacker to cause a service failure or exert other effects
The vulnerability of the pngsetPLTE function in the libpng library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions or other effects such as the termination of an application by using a specially crafted PNG ima...
The vulnerability of the libpng library, which allows a hacker to cause a service failure
The vulnerability of the pngPushReadzTXt function in the libpng library is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure memory out-of-bound reading by setting a high value in the availin field of a PNG image...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code.
Exploiting vulnerabilities in the libpng library version 1.0.6 allows a malicious individual to execute arbitrary code using an improperly created PNG file...
ImageMagick: Crash due to out of bounds error in SpliceImage
The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...
