[SECURITY] Fedora 31 Update: singularity-3.5.2-1.1.fc31

Singularity provides functionality to make portable containers that can be used across host environments...

The vulnerability in the `png_create_info_struct` function of the PNG bitmap graphics library allows a attacker to cause a denial-of-service attack.

The vulnerability of the pngcreateinfostruct function in the library for working with PNG bitmap graphics in libpng is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service interruptions through various network...

Security Bulletin: Vulnerabilities CVE-2017-12613 and CVE-2017-12618 in the IBM i HTTP Server affect IBM i.

Summary HTTP Server is supported by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-12613 DESCRIPTION: Apache Portable Runtime APR could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds array dereference in aprtimeexp...

[SECURITY] Fedora 31 Update: libgit2-0.28.4-1.fc31

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

Nitro Software PDF Reader Buffer Error Vulnerability

Nitro Software PDF Reader is a suite of PDF document editors from Nitro Software, Inc. The product is mainly used to create, edit, view and convert PDF documents. A buffer error vulnerability exists in Nitro Software PDF Reader version 12.0.0.112. The vulnerability arises when a networked system ...

Fedora Update for xpdf FEDORA-2019-b890d4aad2

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Accusoft ImageGear PNG header-parser buffer overflow vulnerability

Accusoft ImageGear is a software development toolkit for image processing from Accusoft Corporation. A buffer overflow vulnerability exists in the Accusoft ImageGear PNG header-parser, which can be exploited by a remote attacker to submit a request for a special PNG file and trick the user into...

The vulnerability of the PDFium component in the Google Chrome browser allows a hacker to perform write-offs beyond the buffer in memory.

The vulnerability of the PDFium component in the Google Chrome browser is related to a unit not being properly accounted for. Exploiting this vulnerability allows a malicious actor to perform write-offs beyond the buffer in memory using a specially created PDF file...

Memory Corruption Vulnerability in iPubsoft PDF to Text Converter

iPubsoft PDF to Text Converter is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF to Text Converter, which can be exploited by attackers to crash the program by constructing malformed PDF files...

Memory Corruption Vulnerability in iPubsoft PDF to PNG Converter for Windows

iPubsoft PDF to PNG Converter for Windows is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF to PNG Converter for Windows, which can be exploited by attackers to cause the program to crash by constructing malformed PDF files...

Memory Corruption Vulnerability in iPubsoft PDF to GIF Converter for Windows

iPubsoft PDF to GIF Converter for Windows is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF to GIF Converter for Windows, which can be exploited by attackers to cause the program to crash by constructing malformed PDF files...

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers arises from reading beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

Google Chrome memory misreference vulnerability (CNVD-2019-42589)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 76.0.3809.100 previous version of a security vulnerability. Remote attackers can exploit the vulnerability through specially crafted PDF files to cause he...

The vulnerability in the software for creating 3D computer graphics with Blender arises from a full-integer overflow, allowing an attacker to execute arbitrary code.

The vulnerability of Blender’s software for creating 3D computer graphics arises from a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created PNG file...

Securing Portable Electronic Devices During Travel

Holiday travelers often use portable electronic devices PEDs because they offer a range of conveniences, for example, enabling the traveler to order gifts on-the-go, access to online banking, or download boarding passes. However, these devices are vulnerable to cyberattack or theft, resulting in...

The vulnerability of the ReadPNMImage function (coders/pnm.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to cause a service failure.

The vulnerability of the ReadPNMImage function coders/pnm.c in the cross-platform library for working with graphics, GraphicsMagick, is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ReadOneJNGImage function (coders/png.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadOneJNGImage function coders/png.c in the cross-platform library for working with graphics, GraphicsMagick, is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code...

[SECURITY] Fedora 30 Update: webkit2gtk3-2.26.2-1.fc30

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

The vulnerability of the `avcodec_default_get_buffer` function in `utils.c` of the Libavcodec library, which is part of the multimedia libraries of Ffmpeg, allows a hacker to execute arbitrary code.

The vulnerability of the avcodecdefaultgetbuffer function in the utils.c file of the Libavcodec library, which is part of the multimedia libraries of Ffmpeg, is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a...

webkitgtk: processing maliciously crafted web content lead to URI spoofing

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...