Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6750

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6749

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6750

CVE-2019-6750 relates to Foxit Studio Photo 3.6.6 (and prior versions) with a flaw in the handling of EZI files. The issue is a write past the end of an allocated structure caused by insufficient validation of user-supplied data, enabling remote code execution in the context of the vulnerable pro...

CVE-2019-6748

Foxit Studio Photo 3.6.6 (and prior) is affected by CVE-2019-6748 due to an out-of-bounds write in the EZI file parser that can lead to remote code execution. The vulnerability requires user interaction (target must open a malicious page/file). Root cause: improper validation during EZI file hand...

CVE-2019-6746

Foxit Studio Photo 3.6.6 (and earlier) is affected by a TIF file handling flaw that can disclose sensitive information due to a read past the end of an allocated structure. The issue requires user interaction (visiting a malicious page or opening a malicious file) and, per the sources, could be l...

CVE-2019-6747

Foxit Studio Photo 3.6.6 is affected by CVE-2019-6747 due to an out-of-bounds write in the EZI file handling, enabling remote code execution when a user opens a malicious file or visits a crafted page. Root cause is lack of proper validation of user-supplied data, writing past the end of an alloc...

CVE-2019-6747

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6751

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo 3.6.6.779. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-6751

CVE-2019-6751 affects Foxit Studio Photo 3.6.6.779 and earlier. The root cause is improper validation of user-supplied data in JPG handling, causing a write past the end of an allocated structure and enabling code execution in the current process when a user opens a malicious file or visits a cra...

CVE-2019-6746

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Studio Photo 3.6.6. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2019-6749

Foxit Studio Photo is affected by an EZIX file parsing vulnerability that enables remote code execution. The flaw (CVE-2019-6749) arises from improper validation of user-supplied data in EZIX file handling, causing a write past the end of an allocated structure. Impact: attackers can execute code...

Ubuntu 16.04 LTS / 18.04 LTS : LibRaw vulnerabilities (USN-3989-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3989-1 advisory. It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted...

USN-3989-1 libraw vulnerabilities

It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-3989-1: LibRaw vulnerabilities

It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code...

CEWE Photo Importer 6.4.3 - '.jpg' Denial of Service (PoC)

-- coding: utf-8 -- Exploit Title: CEWE PHOTO IMPORTER 6.4.3 - Denial of Service PoC Date: 16/05/2019 Author: Alejandra Sánchez Vendor Homepage: https://cewe-photoworld.com/ Software: https://cewe-photoworld.com/creator-software/windows-download Version: 6.4.3 Tested on: Windows 10 Proof of...

CEWE Photo Importer 6.4.3 Denial Of Service

-- coding: utf-8 -- Exploit Title: CEWE PHOTO IMPORTER 6.4.3 - Denial of Service PoC Date: 16/05/2019 Author: Alejandra Sánchez Vendor Homepage: https://cewe-photoworld.com/ Software: https://cewe-photoworld.com/creator-software/windows-download Version: 6.4.3 Tested on: Windows 10 Proof of...

CEWE Photo Importer 6.4.3 - .jpg Denial of Service (PoC)

CEWE Photo Importer 6.4.3 - .jpg Denial of Service PoC -- coding: utf-8 -- Exploit Title: CEWE PHOTO IMPORTER 6.4.3 - Denial of Service PoC Date: 16/05/2019 Author: Alejandra Sánchez Vendor Homepage: https://cewe-photoworld.com/ Software:...

CEWE Photo Importer 6.4.3 - (.jpg) Denial of Service Exploit

-- coding: utf-8 -- Exploit Title: CEWE PHOTO IMPORTER 6.4.3 - Denial of Service PoC Author: Alejandra Sánchez Vendor Homepage: https://cewe-photoworld.com/ Software: https://cewe-photoworld.com/creator-software/windows-download Version: 6.4.3 Tested on: Windows 10 Proof of Concept: 1.- Run the...