CVE-2021-29364

The CVE-2021-29364 entry concerns IrfanView 4.57, with a vulnerability in Formats!ReadRAS_W+0x1001 that allows a crafted RLE file to cause a buffer overflow and execute arbitrary code. Affected component/function: Formats!ReadRAS_W+0x1001 in IrfanView 4.57. Root cause is a buffer overflow when pr...

CVE-2021-29364

A buffer overflow vulnerability in Formats!ReadRASW+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29363

A buffer overflow vulnerability in FORMATS!ReadRASW+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74...

CVE-2021-29363

IrfanView 4.57 is affected by a buffer overflow in FORMATS!ReadRAS_W+0xa74 triggered by crafted RLE files, enabling arbitrary code execution. Exploitation status and specific remediation are not provided in the connected documents.

CVE-2021-29362

A buffer overflow vulnerability in FORMATS!ReadRASW+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29362

CVE-2021-29362 affects IrfanView 4.57 with a buffer overflow in FORMATS!ReadRAS_W+0xa30, exploitable via a crafted RLE file to execute arbitrary code. The connected records consistently describe IrfanView’s buffer overflow vulnerability but do not supply additional technical details (no patch/ver...

CVE-2021-29361

A buffer overflow vulnerability in FORMATS!ReadUtahRLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29361

CVE-2021-29361 affects IrfanView 4.57: a buffer overflow in the formats module (FORMATS!Read_Utah_RLE+0x340) can lead to arbitrary code execution via crafted RLE files. Affected component: Read_Utah_RLE; root cause described as unsafe memory handling causing overflow. Documented by multiple sourc...

CVE-2021-29360

A buffer overflow vulnerability in FORMATS!ReadUtahRLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-29360

CVE-2021-29360 affects IrfanView 4.57. A buffer overflow in FORMAT S!Read_Utah_RLE+0x37a (component handling RLE files) can allow arbitrary code execution when processing a crafted RLE file. The CVE details consistently describe the vulnerability as a buffer overflow in IrfanView’s RLE handling, ...

IrfanView 缓冲区错误漏洞

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. Irfanview is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to execute arbitrary code via a crafted RLE file...

IrfanView 缓冲区错误漏洞

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. Irfanview suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted RLE files...

OESA-2021-1339 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to ...

AZL-44529 CVE-2021-3605 affecting package OpenEXR 2.3.0-6

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

DEBIAN-CVE-2021-3605

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

DEBIAN-CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

UBUNTU-CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS

A buffer overflow vulnerability in pcxwriterle in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

EulerOS Virtualization 2.9.1 : python-pillow (EulerOS-SA-2021-1729)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.CVE-2020-5313 - An out-of-bounds write flaw was...

OESA-2021-1146 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SG...