CVE-2022-41418

An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

CVE-2022-41418

An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute arbitrary code via uploading a crafted PNG file...

[SECURITY] Fedora 37 Update: xfce4-screenshooter-1.10.0-1.fc37

The Xfce Screenshooter utility allows you to capture the entire screen, the active window or a selected region. You can set the delay that elapses before the screenshot is taken and the action that will be done with the screenshot: save it to a PNG file, copy it to the clipboard, or open it using...

Fedora: Security Advisory for advancecomp (FEDORA-2022-99c00af79f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: advancecomp-2.4-1.fc37

AdvanceCOMP contains recompression utilities for your .zip archives, .png images, .mng video clips and .gz files. The official site of AdvanceCOMP is: https://www.advancemame.it This package contains: advzip - Recompression and test utility for zip files advpng - Recompression utility for png fil...

[SECURITY] Fedora 36 Update: advancecomp-2.4-1.fc36

AdvanceCOMP contains recompression utilities for your .zip archives, .png images, .mng video clips and .gz files. The official site of AdvanceCOMP is: https://www.advancemame.it This package contains: advzip - Recompression and test utility for zip files advpng - Recompression utility for png fil...

PT-2022-7171 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2022-7174 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code on affected installations of PDF-XChange Editor. This can be achieved by...

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

A recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous image files, corroborating a crucial link in the threat actor's infection chain. Czech cybersecurity firm Avast said the purpose of the PNG files is to conceal a payload that's used to...

LodePNG 缓冲区错误漏洞

LodePNG is a PNG encoder and decoder in C and C++ by the individual developer Lode Vandevenne. A security vulnerability exists in LodePNG version v20220717, which stems from a segmentation exception in the pngdetail method...

EulerOS 2.0 SP3 : grub2 (EulerOS-SA-2022-2611)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap dat...

CVE-2022-35081

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngreadheader at /src/png2swf.c...

CVE-2022-35081

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngreadheader at /src/png2swf.c...

CVE-2022-35080

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngload at /lib/png.c...

UBUNTU-CVE-2022-35081

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via pngreadheader at /src/png2swf.c...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools commit number:772e55a2, which stems from a heap buffer overflow in pngload in its /lib/png.c component...

PT-2022-22553 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A heap-buffer overflow issue was discovered in SWFTools via the png read header function at /src/png2swf.c. Recommendations: At the moment, there is no information about a newer version th...

PT-2022-22552 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools version 772e55a2 Description: A heap-buffer overflow issue was discovered in SWFTools via the png load function at /lib/png.c. This issue can be exploited, potentially leading to undefined behavior or code execution. No information i...

USN-5671-1: AdvanceCOMP vulnerabilities

It was discovered that AdvanceCOMP did not properly manage memory of function beuint32read under certain circumstances. If a user were tricked into opening a specially crafted binary file, a remote attacker could possibly use this issue to cause AdvanceCOMP to crash, resulting in a denial of...

openSUSE 15 Security Update : pngcheck (openSUSE-SU-2022:10142-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10142-1 advisory. - A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.05 patches applied via a crafted png file. CVE-2020-35511 Note that...