CVE-2017-9115

CVE-2017-9115 affects OpenEXR 2.2.0: an invalid write of size 2 in the = operator function in half.h can crash the application or allow code execution. Public references indicate a fix in OpenEXR 2.2.1; upgrading to 2.2.1 or newer is the advised remediation. Connected docs also note related, broa...

CVE-2017-9114

In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash...

CVE-2017-9115

In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code...

CVE-2017-9116

In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash...

CVE-2017-9113

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code...

OpenEXR -- multiple remote code execution and denial of service vulnerabilities

Brandon Perry reports: There is a zip file of EXR images that cause segmentation faults in the OpenEXR library tested against 2.2.0. CVE-2017-9110 In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash. CVE-2017-9111 In OpenEXR...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ImageIO component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted EXR image with B44...

Apple OS X ImageIO memory corruption vulnerability (CNVD-2016-05768)

Apple OS X is a specialized operating system developed for Mac computers. A security vulnerability exists in ImageIO in Apple OS X, which can be exploited by remote attackers to execute arbitrary code or conduct denial-of-service attacks using B44 compressed EXR images...

Apple picture file leading to remote code execution-vulnerability warning-the black bar safety net

The vulnerability is from the Cisco Talos Tyler Bohan found. People in order to a specific industry specific design uses a number of file formats. Apple through the APIs interface to provide a specific way to access the OSX platform on a variety of image format of image data. Talos disclosure of...

Gentoo Security Advisory GLSA 201312-07

Gentoo Linux Local Security Checks GLSA 201312-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the openexr package up to version 1.7.0 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Apple Mac OS X 10.x ImageIO OpenEXR Image File Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17768/info ImageIO is susceptible to a remote denial-of-service vulnerability. This issue is do to a failure to properly process malicious OpenEXR image files. This issue allows remote users to crash applications that use...

OpenEXR: Multiple Vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact A...

GLSA-201312-07 : OpenEXR: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-07 OpenEXR: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could execute arbitrary co...

Debian DSA-1842-1 : openexr - several vulnerabilities

Several vulnerabilities have been discovered in the OpenEXR image library, which can lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1720 Drew Yao discovered integer overflows in the preview and compression...

Mandriva Security Advisory MDVSA-2009:191-1 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory MDVSA-2009:191-1. OpenVAS Vulnerability Test $Id: mdksa20091911.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:191-1 OpenEXR Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Security Advisory MDVSA-2009:191-1 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory MDVSA-2009:191-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : OpenEXR (MDVSA-2009:191-1)

Multiple vulnerabilities has been found and corrected in OpenEXR : Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer...

SLES10: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR OpenEXR-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR OpenEXR-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...