515 matches found
[SECURITY] Fedora 27 Update: gd-2.2.5-1.fc27
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...
nipponpaint.com.hk XSS vulnerability
Open Bug Bounty ID: OBB-317629 Description| Value ---|--- Affected Website:| nipponpaint.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Corel PHOTO-PAINT X8 64-bit TIFF Filter Code Execution Vulnerability(CVE-2017-2803)
Summary A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger...
Corel PHOTO-PAINT X8 TIFF Filter Code Execution Vulnerability(CVE-2017-2804)
Summary A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this...
Corel PHOTO-PAINT X8 GIF Filter Code Execution Vulnerability(CVE-2016-8730)
Summary An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a...
Corel PHOTO-PAINT X8 TIFF Parsing Code Execution Vulnerability
Corel PHOTO-PAINT X8 is the Canadian Corel Corel company's set of color and photo editing software. A remote code execution vulnerability exists in the TIFF parsing feature in Corel PHOTO-PAINT X8 version 18.1.0.661. A remote attacker could exploit this vulnerability to execute arbitrary code or...
Corel PHOTO-PAINT X8 GIF Parsing Function Code Execution Vulnerability
Corel PHOTO-PAINT X8 is the Canadian Corel Corel company's set of color and photo editing software. A remote code execution vulnerability exists in the GIF parsing feature in Corel PHOTO-PAINT X8 version 18.1.0.661. A remote attacker could exploit this vulnerability to execute arbitrary code or...
Corel PHOTO-PAINT X8 TIFF Parsing Code Execution Vulnerability
Corel PHOTO-PAINT X8 is the Canadian Corel Corel company's set of color and photo editing software. A remote code execution vulnerability exists in the TIFF parsing feature in Corel PHOTO-PAINT X8 version 18.1.0.661. A remote attacker could exploit this vulnerability to execute arbitrary code or...
CVE-2014-8393
DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion...
CVE-2014-8393
DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion...
Spoofing
DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion...
CVE-2014-8393
CVE-2014-8393 corresponds to a DLL hijacking vulnerability in Corel products (CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015 and Corel PDF Fusion, plus related apps). The flaw arises when a file is opened and the application searches the document’s directory for DL...
Relax: Microsoft is NOT Killing Paint App
By Carolina Earlier yesterday news broke out citing that Microsoft is killing its Paint program for Windows and in the upcoming update for Windows 10 the program will be no longer available. But now, the company has rubbished the reports and said that its not killing the Paint app rather making i...
Vulnerability Spotlight: Multiple Vulnerabilities in CorelDRAW X8
Today, Talos is disclosing several vulnerabilities that have been identified in CorelDRAW X8. CorelDRAW X8 is graphics suite used for manipulating raster and vector images and is a common alternative to Adobe Creative Cloud. Several of the vulnerabilities being disclosed today specifically affect...
Corel PHOTO-PAINT X8 TIFF Filter Code Execution Vulnerability
Summary A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this...
Corel PHOTO-PAINT X8 GIF Filter Code Execution Vulnerability
Summary An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a...
Corel PHOTO-PAINT X8 64-bit TIFF Filter Code Execution Vulnerability
Summary A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger...
doorsforbuilders.com XSS vulnerability
Vulnerable URL: http://www.doorsforbuilders.com/Paint-Grade-MDF-Door.php?Door=ts1000=TS-Series=Interior=1/-///'/"//--...
Microsoft Paint Recent File History
Nessus was able to generate a list of files opened using the Microsoft Paint program. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid92427; scriptversion"1.5"; scriptcvsdate"Date: 2018/05/23 16:10:01"; scriptnameenglish:"Microsoft Paint Recent File History";...
Paint by Numbers - Animals - Native code usage, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Paint by Numbers - Animals published at the 'play' market has multiple vulnerabilities...