Apple OS X ImageIO memory corruption vulnerability (CNVD-2016-05768)

Apple OS X is a specialized operating system developed for Mac computers. A security vulnerability exists in ImageIO in Apple OS X, which can be exploited by remote attackers to execute arbitrary code or conduct denial-of-service attacks using B44 compressed EXR images...

Apple picture file leading to remote code execution-vulnerability warning-the black bar safety net

The vulnerability is from the Cisco Talos Tyler Bohan found. People in order to a specific industry specific design uses a number of file formats. Apple through the APIs interface to provide a specific way to access the OSX platform on a variety of image format of image data. Talos disclosure of...

Gentoo Security Advisory GLSA 201312-07

Gentoo Linux Local Security Checks GLSA 201312-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the openexr package up to version 1.7.0 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Apple Mac OS X 10.x ImageIO OpenEXR Image File Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17768/info ImageIO is susceptible to a remote denial-of-service vulnerability. This issue is do to a failure to properly process malicious OpenEXR image files. This issue allows remote users to crash applications that use...

OpenEXR: Multiple Vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact A...

GLSA-201312-07 : OpenEXR: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-07 OpenEXR: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could execute arbitrary co...

Debian DSA-1842-1 : openexr - several vulnerabilities

Several vulnerabilities have been discovered in the OpenEXR image library, which can lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1720 Drew Yao discovered integer overflows in the preview and compression...

Mandriva Security Advisory MDVSA-2009:191-1 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory MDVSA-2009:191-1. OpenVAS Vulnerability Test $Id: mdksa20091911.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:191-1 OpenEXR Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Security Advisory MDVSA-2009:191-1 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory MDVSA-2009:191-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : OpenEXR (MDVSA-2009:191-1)

Multiple vulnerabilities has been found and corrected in OpenEXR : Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer...

SLES10: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR OpenEXR-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR OpenEXR-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES11: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/ VID...

SLES11: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 2009...

openSUSE 10 Security Update : OpenEXR (OpenEXR-6393)

This update of OpenEXR fixes seceral integer overflows CVE-2009-1720 and a denial-of-service probably execution of arbitrary code bug CVE-2009-1721. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

SuSE 11 Security Update : OpenEXR (SAT Patch Number 1155)

This update of OpenEXR fixes several integer overflows CVE-2009-1720 and a denial-of-service probably execution of arbitrary code bug. CVE-2009-1721 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 10 Security Update : OpenEXR (ZYPP Patch Number 6392)

This update of OpenEXR fixes several integer overflows CVE-2009-1720, a denial-of-service probably execution of arbitrary code bug CVE-2009-1721 and another possible remote code execution bug in the compression code. CVE-2009-1721 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

Ubuntu USN-831-1 (openexr)

The remote host is missing an update to openexr announced via advisory USN-831-1. OpenVAS Vulnerability Test $Id: ubuntu8311.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8311.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-831-1 openexr Authors: Thomas...

Ubuntu: Security Advisory (USN-831-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...