3973 matches found
EulerOS 2.0 SP2 : libpng (EulerOS-SA-2020-1661)
According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the pngcombinerow function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might...
VLC < 2.1.4 DoS
A denial of service DoS vulnerability exists in VLC media player. An unauthenticated, remote attacker can exploit this issue, by tricking a user into opening a specially crafted .png file, to cause the application to stop responding. C Tenable Network Security, Inc. include'compat.inc'; if...
openSUSE Security Update : GraphicsMagick (openSUSE-2020-779)
This update for GraphicsMagick fixes the following issues : - CVE-2020-12672: heap-based buffer overflow in ReadMNGImage in coders/png.c. boo1171271 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
asb.or.at Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179203 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
The vulnerability of the PngChunk::parseChunkContent function in the Exiv2 media metadata management library allows a attacker to cause a service failure.
The vulnerability of the PngChunk::parseChunkContent function in the Exiv2 media metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures through the use of a speciall...
le-bernardinprive.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1173184 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
tropiclean.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1167304 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
coxsbazarreport.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1166157 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
artsuggest.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1165027 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
bohriali.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1161188 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
job.akademie-sport-gesundheit.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1160431 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
revedegourmandises.unblog.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1159426 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-6075
An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...
CVE-2020-6075
An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...
Out-of-bounds
An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...
CVE-2020-6075
An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...
CVE-2020-6075
CVE-2020-6075 concerns a out-of-bounds write in Accusoft ImageGear 19.5.0 (igcore19d.dll) triggered by a malformed PNG, enabling remote code execution. The vulnerability stems from store_data_buffer copying from src_buffer to dst_buffer with a loop controlled by size; an incorrect cast (signed/un...
DEBIAN-CVE-2020-12672
GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c...
UBUNTU-CVE-2020-12672
GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c...
Accusoft ImageGear PNG store_data_buffer size computation code execution vulnerability
Summary An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed...