1588 matches found
PT-2014-9042 · Imagemagick +2 · Imagemagick +2
Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to have an unspecified impact via a crafted psd file. This is related to the coders/psd.c component in ImageMagick. Recommendations: At the moment, the...
UBUNTU-CVE-2014-9843
The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors...
Amazon Linux AMI : ImageMagick (ALAS-2014-336)
A buffer overflow flaw was found in the way ImageMagick handled PSD images that use RLE encoding. An attacker could create a malicious PSD image file that, when opened in ImageMagick, would cause ImageMagick to crash or, potentially, execute arbitrary code with the privileges of the user running...
Amazon Linux AMI : GraphicsMagick (ALAS-2014-420)
A buffer overflow flaw affecting ImageMagick and GraphicsMagic when handling PSD images was reported. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2014-420. include"compat.inc"; if description...
Medium: GraphicsMagick
Issue Overview: A buffer overflow flaw affecting ImageMagick and GraphicsMagic when handling PSD images was reported. Affected Packages: GraphicsMagick Issue Correction: Run yum update GraphicsMagick or yum update --advisory ALAS-2014-420 to update your system. New Packages: i686: ...
MGASA-2014-0370 Updated graphicsmagick packages fix CVE-2014-1947
Updated graphicsmagick packages fix security vulnerability: A buffer overflow flaw was found in the way GraphicsMagick writes PSD images when the input data has a large number of layers. Due to the compilation options used in Mageia, the buffer overflow is reduced to a crash, making this a denial...
Updated graphicsmagick packages fix CVE-2014-1947
Updated graphicsmagick packages fix security vulnerability: A buffer overflow flaw was found in the way GraphicsMagick writes PSD images when the input data has a large number of layers. Due to the compilation options used in Mageia, the buffer overflow is reduced to a crash, making this a denial...
Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
The version of Autodesk SketchBook Pro installed on the remote Mac OS X host is prior to 6.2.6. It is, therefore, affected by integer and heap-based buffer overflow vulnerabilities. Using a specially crafted PSD or PXD file, an attacker could cause a denial of service or execute arbitrary code. C...
Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
The version of Autodesk SketchBook Pro installed on the remote host is prior to 6.2.6. It is, therefore, affected by integer and heap-based buffer overflow vulnerabilities. Using a specially crafted PSD or PXD file, an attacker could cause a denial of service or execute arbitrary code. C Tenable...
Autodesk SketchBook Pro < 6.2.5 / SketchBook Copic Edition < 2.0.2 Heap Buffer Overflow
The version of Autodesk SketchBook installed on the remote host is Pro prior to 6.2.5 or Copic Edition prior to 2.0.2. It is, therefore, affected by a heap-based buffer overflow vulnerability. The flaw exists when decompressing RLE-compressed channel data in PSD files, since user-supplied input i...
Integer overflow
Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...
CVE-2014-3938
Autodesk SketchBook Pro is affected if installed version is prior to 6.2.6. The vulnerability arises from integer overflow and heap-based buffer overflow triggered by crafted layer mask data in a PSD file, which can lead to remote code execution (per the connected Nessus entries). The issue speci...
CVE-2014-3938
Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...
PT-2014-5618
Name of the Vulnerable Software and Affected Versions Autodesk SketchBook Pro versions prior to 6.2.6 Description The issue is related to an integer overflow that can be triggered by crafted layer mask data in a PSD file, leading to a heap-based buffer overflow. This can allow remote attackers to...
CVE-2014-3938: Undefined Security Weakness
Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...
openSUSE Security Update : ImageMagick (openSUSE-SU-2014:0362-1)
ImageMagick was updated to fix a buffer overflow in handling of PSD images. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-206. The text description of this plugin is C SUSE LLC...
Medium: ImageMagick
Issue Overview: A buffer overflow flaw was found in the way ImageMagick handled PSD images that use RLE encoding. An attacker could create a malicious PSD image file that, when opened in ImageMagick, would cause ImageMagick to crash or, potentially, execute arbitrary code with the privileges of t...
Debian DSA-2898-1 : imagemagick - security update
Several buffer overflows were found in Imagemagick, a suite of image manipulation programs. Processing malformed PSD files could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
[SECURITY] [DSA 2898-1] imagemagick security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2897-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 09, 2014 http://www.debian.org/security/faq -...