Vulnerability Spotlight: Multiple vulnerabilities in Computerinsel Photoline

These vulnerabilities are discovered by Piotr Bania of Cisco Talos.Today, Talos is releasing details of multiple vulnerabilities discovered within the Computerinsel GmbH PhotoLine image processing software. PhotoLine, developed by Computerinsel GmbH, is a well established raster and vector graphi...

Computerinsel Photoline SVG Parsing Code Execution Vulnerability

Summary An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution. An attacker can send a specific .SV...

Computerinsel Photoline TGA Parsing Code Execution Vulnerability

Summary A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability. Teste...

PhotoLine Handles EMF Image Memory Corruption Vulnerability

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the software's handling of the EMF format, which could be exploited by attackers to construct malformed EMF files that could crash the program...

PhotoLine Handles JPG Image Memory Corruption Vulnerability

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the program's handling of the JPG format. Allowing an attacker to exploit this vulnerability to construct malformed JPG files could crash the program...

PhotoLine Handles TIFF Image Memory Corruption Vulnerability

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the software's handling of the TIFF format, which could be exploited by attackers to construct malformed TIFF files that could crash the program...

Memory Corruption Vulnerability in PhotoLine's Processing of PCX Images

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the software's handling of the PCX format, which could be exploited by attackers to construct malformed PCX files that could crash the program...

Memory Corruption Vulnerability in PhotoLine's Handling of ICO Files

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the ICO format, which can be exploited by an attacker to construct malformed ICO files that can crash the program and cause a denial of service condition...

Memory Corruption Vulnerability in PhotoLine's Handling of AVI Files

PhotoLine is a professional image editing software from Germany. A memory corruption vulnerability exists in the software's handling of the AVI format, which can be exploited by an attacker to construct malformed AVI files that can crash the program and cause a denial of service condition...

Stack Buffer Overflow Vulnerability in PhotoLine's Handling of GIF Images

PhotoLine is a professional image editing software from Germany. The software suffers from a stack buffer overflow vulnerability when processing the GIF format. An attacker can exploit the vulnerability to flood the SEH chain table, resulting in arbitrary code execution...

PhotoLine Handles PSD Files with Memory Corruption Vulnerability

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the PSD format, which can be exploited by an attacker to construct malformed PSD files that can crash the program and cause a denial of service condition...

Memory Corruption Vulnerability in PhotoLine's Processing of BMP Images

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the BMP format, which can be exploited by an attacker to construct malformed BMP files that can crash the program and cause a denial of service condition...

Memory Corruption Vulnerability in PhotoLine's Handling of GIF Images

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the GIF format, which can be exploited by an attacker to construct malformed BMP files that can crash the program and cause a denial of service condition...

CVE-2012-1055

Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

Heap overflow

Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

CVE-2012-1055

Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

CVE-2012-1055

CVE-2012-1055 affects PhotoLine 17.01 (and possibly earlier versions before 17.02). The vulnerability is a heap-based buffer overflow in processing JPEG2000 JP2 files with crafted Quantization Default (QCD) marker segments, allowing remote code execution. Affected component is the image editor’s ...

CVE-2012-1055: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...