ImageMagick 6.x < 6.9.4-0 / 7.x < 7.0.1-2 Multiple Vulnerabilities

The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.4-0 or 7.x prior to 7.0.1-2. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the imagick Extension that allows an unauthenticated, remote attacker to bypass the 'disablefunctions'...

Apple QuickTime < 7.7.79.80.95 - PSD File Parsing Memory Corruption

Exploit for multiple platform in category dos / poc Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1769 1 Introduction 2 Report...

Secunia Research: Oracle Outside In ibpsd2.dll PSD File Processing Buffer Overflow Vulnerability

====================================================================== Secunia Research 16/04/2015 Oracle Outside In ibpsd2.dll PSD File Processing Buffer Overflow Vulnerability ====================================================================== Table of Contents Affected...

CVE-2014-9833

Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file...

UBUNTU-CVE-2014-9828

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file...

CVE-2014-9828

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file...

UBUNTU-CVE-2014-9833

Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file...

PT-2014-9042 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to have an unspecified impact via a crafted psd file. This is related to the coders/psd.c component in ImageMagick. Recommendations: At the moment, the...

PT-2014-9046

Name of the Vulnerable Software and Affected Versions ImageMagick version 6.8.9-9 Description A heap overflow issue exists, which can be triggered by a crafted psd file. Recommendations For ImageMagick version 6.8.9-9, update to a newer version that contains a fix for this issue...

Integer overflow

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-3938

Autodesk SketchBook Pro is affected if installed version is prior to 6.2.6. The vulnerability arises from integer overflow and heap-based buffer overflow triggered by crafted layer mask data in a PSD file, which can lead to remote code execution (per the connected Nessus entries). The issue speci...

CVE-2014-3938

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-3938: Undefined Security Weakness

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

PT-2014-5618

Name of the Vulnerable Software and Affected Versions Autodesk SketchBook Pro versions prior to 6.2.6 Description The issue is related to an integer overflow that can be triggered by crafted layer mask data in a PSD file, leading to a heap-based buffer overflow. This can allow remote attackers to...

Autodesk SketchBook Pro PSD通道RLE解压缓冲区溢出漏洞

Bugtraq ID:66563 CVE ID:CVE-2013-5365 Autodesk SketchBook Pro是速写簿软件。 Autodesk SketchBook Pro解压PSD文件内的RLE压缩通道数据时存在边界错误，这可使远程攻击者通过特制的PSD文件，利用此漏洞造成堆缓冲区溢出。 0 Autodesk SketchBook Pro 6.2.4 build 425798 for Windo 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

CVE-2013-5365

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

Heap overflow

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

CVE-2013-5365

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

CVE-2013-5365

Autodesk SketchBook vulnerability CVE-2013-5365 is a heap-based buffer overflow in affected SketchBook variants (Enterprise 2014, Pro, Express before 6.25; Copic Edition before 2.0.2). The flaw occurs while decompressing RLE-compressed channel data in PSD files, enabling remote code execution. Re...

PT-2014-2918

Name of the Vulnerable Software and Affected Versions Autodesk SketchBook for Enterprise versions prior to 6.25 Autodesk SketchBook Pro versions prior to 6.25 Autodesk SketchBook Express versions prior to 6.25 Autodesk SketchBook Copic Edition versions prior to 2.0.2 Description The issue allows...