Installer of FENCE-Explorer may insecurely load Dynamic Link Libraries and invoke executable files

Overview FENCE-Explorer provided by FUJITSU BROAD SOLUTION & CONSULTING Inc. is a tool to view and edit a file in "FENCE Briefcase" which is created by FENCE-Pro and other FENCE series software. Installer of FENCE-Explorer contains an issue with the search path for DLL/executable files, which may...

CVE-2017-2822

An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A...

RedHat Update for poppler RHSA-2017:2550-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

poppler: Integer overflow in JBIG2Stream.cc

An integer overflow leading to heap-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash, or potentially execute arbitrary code when opened...

QPDF Denial of Service Vulnerability (CNVD-2017-30595)

QPDF is content preserving PDF conversion system. The QPDF tokenizer implementation has a security vulnerability that allows remote attackers to exploit the vulnerability to build special PDF files that can be parsed by inducing users and can be used for denial-of-service attacks...

The vulnerability of the Microsoft Windows PDF Library on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows PDF Library on the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code when objects in memory are processed incorrectly...

The vulnerability in the XFA event-management system allows attackers to execute arbitrary code. This vulnerability affects programs for editing PDF files such as Adobe Acrobat Document Cloud and Adobe Acrobat, as well as programs for viewing PDF files like Adobe Reader and Adobe Reader Document Cloud.

The vulnerability of XFA event management and PDF editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewer programs like Adobe Reader, Adobe Reader Document Cloud is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious act...

The vulnerability lies in the image processing mechanism when dealing with EMF files related to text output, PDF file editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF file viewing programs like Adobe Reader Document Cloud. This allows a perpetrator to execute arbitrary code.

The vulnerability lies in the image processing mechanism when dealing with EMF files related to text output, PDF file editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF file viewing programs like Adobe Reader Document Cloud. It arises due to the execution of an operation...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25063)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in the 'WritePDFImage' function of the ImageMagick coders/pdf.c file, which allows remote attackers to exploit the vulnerability to construct a...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25057)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial of service vulnerability exists in the ReadOnePNGImage function of the ImageMagick coders/png.c file, which allows remote attackers to exploit the vulnerability to construct a...

Unspecified Vulnerability in GraphicsMagick

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadMNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. No details of the vulnerability are...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25056)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in ImageMagick's handling of PNG files, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into...

DEBIAN-CVE-2017-13142

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files...

DEBIAN-CVE-2017-13141

In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c...

UBUNTU-CVE-2017-13142

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files...

[SECURITY] Fedora 26 Update: chicken-4.12.0-3.fc26

CHICKEN is a compiler for the Scheme programming language. CHICKEN produces portable, efficient C, supports almost all of the R5RS Scheme language standard, and includes many enhancements and extensions...

[SECURITY] Fedora 25 Update: nasm-2.13.01-3.fc25

NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax...

[SECURITY] Fedora 26 Update: nasm-2.13.01-3.fc26

NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax...

The vulnerability of the wwunpack function (libclamav/wwunpack.c) in the Clam Antivirus anti-virus tool allows a hacker to cause a service failure.

The vulnerability of the wwunpack function in the Clam Antivirus protection tool libclamav/wwunpack.c is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created PE file, compressed with WWPack...

USN-3393-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2017-6418 It was discovered that ClamAV incorrectly handled certain malformed CHM files. A remote...