3973 matches found
ImageMagick Denial of Service Vulnerability (CNVD-2019-12132)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in ImageMagick versions 7.0.7-29 and earlier, which stems from a failure to perform a NULL check in ReadOneJNGImage in...
CVE-2018-16749
In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service WriteBlob assertion failure and application exit via a crafted file...
DEBIAN-CVE-2018-16640
ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c...
[SECURITY] Fedora 28 Update: gd-2.2.5-6.fc28
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...
UBUNTU-CVE-2018-16640
ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c...
Exiv2 Denial of Service Vulnerability (CNVD-2018-18043)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the...
CVE-2018-16352
There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used...
CVE-2018-16352
There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used...
PYSEC-2018-135
Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file, a different vulnerability than CVE-2018-10999...
CVE-2018-16336
CVE-2018-16336 affects Exiv2 (v0.26) via Exiv2::Internal::PngChunk::parseTXTChunk. The vulnerability is a heap-based buffer over-read caused by processing crafted TXT chunks in PNG files, enabling a remote denial of service. Connected sources corroborate this issue within Exiv2’s PNG/text parsing...
PT-2018-3636 · Exiv2 +8 · Exiv2 +8
Name of the Vulnerable Software and Affected Versions: Exiv2 versions 0.26 and earlier Description: The issue is related to the incorrect handling of PNG files by the PngChunk::readRawProfile function in the Exiv2 library for managing media file metadata. This can be exploited by a remote attacke...
Geutebrueck re_porter cross-site scripting vulnerability
Geutebrueck is a video management system from GEUREBRÜCK, Germany. sreporter is one of the hybrid recorders for digital storage and video signal transmission for MPEG4 CCTV-Standard. A cross-site scripting vulnerability exists in Geutebrueck reporter 16 versions prior to 7.8.974.20. A remote...
CVE-2018-15533
A reflected cross-site scripting vulnerability exists in Geutebrueck reporter 16 before 7.8.974.20 by appending a query string to /modifychannel/exec or /images/.png on TCP port 12005...
Remote Desktop Caching - Tool To Recover Old RDP (mstsc) Session Information In The Form Of Broken PNG Files
This tool allows one to recover old RDP mstsc session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an...
[SECURITY] Fedora 28 Update: libpng-1.6.34-6.fc28
The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...
CVE-2018-14876
An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width...
Fedora 27 : libpng10 (2018-3e04e9fe54)
Fix for CVE-2018-13785: the libpng10 library was vulnerable to an integer overflow and resultant divide-by-zero in the pngrutil.c:pngcheckchunklength function. An attacker could exploit this to cause a denial of service via a crafted PNG file. Note that Tenable Network Security has extracted the...
[SECURITY] Fedora 27 Update: libpng10-1.0.69-5.fc27
The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...
libpng Denial of Service Vulnerability (CNVD-2018-20558)
libpng is a PNG reference library that can create, read and write PNG graphics files. A security vulnerability exists in the 'pngfreedata' function in the png.c file in libpng version 1.6.34. An attacker can exploit this vulnerability to cause a denial of service segmentation error...