[SECURITY] Fedora 19 Update: libpng-1.5.13-3.fc19

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

[SECURITY] Fedora 20 Update: libpng-1.6.6-3.fc20

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

CVE-2014-3441

codec\libpngplugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service crash via a crafted .png file, as demonstrated by a png in a .wave file...

CVE-2014-3441

codec\libpngplugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service crash via a crafted .png file, as demonstrated by a png in a .wave file...

Design/Logic Flaw

codec\libpngplugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service crash via a crafted .png file, as demonstrated by a png in a .wave file...

CVE-2014-3441

codec\libpngplugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service crash via a crafted .png file, as demonstrated by a png in a .wave file...

CVE-2014-3441

codec\libpngplugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service crash via a crafted .png file, as demonstrated by a png in a .wave file...

KLA10008 Denial of Service in VideoLAN VLC Media Player

An unspecified vulnerability was found in VLC versions 2.1.3 and earlier. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network through a specially designed .png file. It is caused by codeclibpngplugin.dll. Original...

VLC Player 2.1.3 Memory Corruption

Exploit Title: VLCplayer memory corruption in latest Version 2.1.3 Date: 2014/05/07 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.videolan.org Software Link:...

DEBIAN-CVE-2013-7353

Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service segmentation fault and crash via a crafted image, which triggers a heap-based buffer overflow...

Processing malformed PNG by incoming mail handler causes OOM and blocks queue

There are two problems: 1. OOM 2. Incoming email processing is blocked Looks like this is similar problem to JRA-35816, fixed in atlassian-core, but mail handler does not use atlassian-core. It affects production OnDemand, all instances. codejava.lang.OutOfMemoryError: Java heap space Dumping hea...

Processing malformed PNG by incoming mail handler causes OOM and blocks queue

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-38028. panel There are two problems: 1. OOM 2. Incoming email processing is blocked Looks like this is similar problem to JRA-35816, fixed in...

Processing malformed PNG by incoming mail handler causes OOM and blocks queue

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report|http://jira.atlassian.com/browse/JRASERVER-38028. panel There are two problems: 1. OOM 2. Incoming email processing is blocked Looks like this is similar problem to JRA-35816, fixed i...

libpng: unhandled zero-length PLTE chunk or NULL palette

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

OptiPNG: User-assisted execution of arbitrary code

Background OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. Description A use-after-free vulnerability exists in the palette reduction functionality of OptiPNG. Impact A remote attacker could entice a user to open a specially crafted imag...

Alienvault 4.5.0 - (Authenticated) SQL Injection (Metasploit)

The following request is vulnerable to a SQL injection attack from authenticated users. GET /ossim/report/BusinessAndComplianceISOPCI/ISO27001Bar1.php?datefrom=2014-02-28&dateto=2014-03-30 HTTP/1.1 Host: 172.31.16.150 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101...

AlienVault 4.5.0 SQL Injection Vulnerability

AlienVault version 4.5.0 suffers from an authenticated remote SQL injection vulnerability. Metasploit module proof of concept is included. The following request is vulnerable to a SQL injection attack from authenticated users. GET...

Microsoft Office PNG File Parsing Buffer Overflow - - Ver2 (CVE-2013-1331)

A buffer overflow vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

GDI PNG Heap Overflow - Ver2 (CVE-2009-2501)

A buffer overflow vulnerability has been reported in GDI+. An attacker could exploit this vulnerability via a crafted PNG image file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

AlienVault Authenticated SQL Injection Arbitrary File Read

AlienVault 4.5.0 is susceptible to an authenticated SQL injection attack via a PNG generation PHP file. This module exploits this to read an arbitrary file from the file system. Any authenticated user is able to exploit it, as administrator privileges aren't required. Module Options msf use...