CVE-2017-9110

OpenEXR 2.2.0 has a vulnerability CVE-2017-9110 due to an invalid read of size 2 in ImfHuf.cpp (hufDecode), which can cause a crash. The issue is addressed in OpenEXR 2.2.1 (see linked release). Connected advisories note broader OpenEXR security updates across distributions (Debian/DLA, Fedora/Ma...

CVE-2017-9112

OpenEXR 2.2.0 is affected by CVE-2017-9112 due to an invalid read of size 1 in the getBits function (ImfHuf.cpp), which could cause a crash. The vulnerability details are documented across multiple sources (OpenEXR issue/PR references and Debian/Ubuntu advisories). A fix is available in OpenEXR 2...

CVE-2017-9112

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

CVE-2017-9111

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...

CVE-2017-9116

In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash...

CVE-2017-9114: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash...

CVE-2017-9116: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash...

CVE-2017-9112: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

CVE-2017-9115: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code...

CVE-2017-9110: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash...

CVE-2017-9111: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...

CVE-2017-9113: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code...

OpenEXR -- multiple remote code execution and denial of service vulnerabilities

Brandon Perry reports: There is a zip file of EXR images that cause segmentation faults in the OpenEXR library tested against 2.2.0. CVE-2017-9110 In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash. CVE-2017-9111 In OpenEXR...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ImageIO component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted EXR image with B44...

Apple OS X ImageIO memory corruption vulnerability (CNVD-2016-05768)

Apple OS X is a specialized operating system developed for Mac computers. A security vulnerability exists in ImageIO in Apple OS X, which can be exploited by remote attackers to execute arbitrary code or conduct denial-of-service attacks using B44 compressed EXR images...

Apple picture file leading to remote code execution-vulnerability warning-the black bar safety net

The vulnerability is from the Cisco Talos Tyler Bohan found. People in order to a specific industry specific design uses a number of file formats. Apple through the APIs interface to provide a specific way to access the OSX platform on a variety of image format of image data. Talos disclosure of...

Gentoo Security Advisory GLSA 201312-07

Gentoo Linux Local Security Checks GLSA 201312-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the openexr package up to version 1.7.0 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Apple Mac OS X 10.x ImageIO OpenEXR Image File Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17768/info ImageIO is susceptible to a remote denial-of-service vulnerability. This issue is do to a failure to properly process malicious OpenEXR image files. This issue allows remote users to crash applications that use...

OpenEXR: Multiple Vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact A...