40 matches found
PNGDec 资源管理错误漏洞
PNGDec is an Arduino PNG image decoder library from the individual developer Larry Bank. A security vulnerability exists in PNGDec that stems from a floating point exception in SaveBMP in the /linux/main.cpp file...
PNGDec 缓冲区错误漏洞
PNGDec is an Arduino PNG image decoder library from the individual developer Larry Bank. A security vulnerability exists in PNGDec that stems from a heap buffer overflow in interceptorfwrite.part.57 of the sanitizercommoninterceptors.inc file...
CVE-2022-23585
Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling png::CommonInitDecode..., &decode, the decode value contains allocated buffers which can only be freed by calling...
Denial Of Service (DoS)
GStreamer is denial of service DoS. Multiple integer overflow flaws, that could lead to a buffer overflow, were found in the GStreamer Good Plug-ins PNG decoding handler. An attacker could create a specially-crafted PNG file that would cause an application using the GStreamer Good Plug-ins librar...
TAU Threat Intelligence Notification: Spear Phishing Targeting Italy
Summary This campaign is targeting users in Italy with spear phishing email containing malicious attachments. Figure 1: Emails with the malicious XLS attachment The image above show one of the sample has attached in multiple email that has been sent to email address with Italy ccTLD. The attached...
LuPng in Heap Buffer Overflow Vulnerability
LuPng is a PNG format decoder/encoder. A heap buffer overflow vulnerability exists in the 'insertByte' function of the miniz/lupng.c file in LuPng 2017-03-10 and earlier versions, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...
FFmpeg 'decode_frame_common' function heap buffer overflow vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A heap buffer overflow vulnerability exists in the 'decodeframecommon' function in the libavcodec/pngdec.c file in FFmpeg. An attacker can exploit this vulnerability to cause a denial of...
DEBIAN-CVE-2017-7863
FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframecommon function in libavcodec/pngdec.c...
UBUNTU-CVE-2017-7863
FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decodeframecommon function in libavcodec/pngdec.c...
UBUNTU-CVE-2017-7866
FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decodezbuf function in libavcodec/pngdec.c...
Oracle Linux 5 : gstreamer-plugins-good (ELSA-2009-1123)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1123 advisory. 0.10.9-1.el5.2 - CVE-2009-1932: Integer overflow in PNG decoder. Tenable has extracted the preceding description block directly from the Oracle Linux security...
FreeBSD : ziproxy -- security vulnerability in PNG decoder (25673e6e-786b-11df-a921-0245fb008c0b)
Daniel Mealha Cabrita reports : Fixed security vulnerability heap-related in PNG decoder. new bug from 3.1.0 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...
CVE-2010-2350
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PNG file...
DEBIAN-CVE-2010-2350
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PNG file...
CVE-2010-2350
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PNG file...
CVE-2010-2350
CVE-2010-2350 describes a heap-based buffer overflow in the PNG decoder of Ziproxy 3.1.0. The vulnerability allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via a crafted PNG file. Affected software: Ziproxy’s PNG image processing. Root cause: ov...
CVE-2010-2350
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PNG file...
CVE-2010-2350: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PNG file...
