CVE-2017-10748

CNVD-2017-19919 and NVD entry CVE-2017-10748 describe a buffer overflow in XnView Classic for Windows 2.40 that can be triggered by a specially crafted .rle file, enabling arbitrary code execution or denial of service. The CNVD/CVE records confirm the vulnerable product/version and the attack vec...

CVE-2017-10782

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpFreeHeap+0x00000000000003ca."...

CVE-2017-10736

XnView Classic for Windows 2.40 is affected by a buffer-overflow vulnerability triggered by a crafted .rle file, allowing arbitrary code execution or denial of service. Root cause references a User Mode Write AV starting at msvcrt!_VEC_memzero+0x6a. Impact is described as potential code execution...

CVE-2017-10750

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write AV near NULL starting at ntdll77df0000!RtlEnterCriticalSection+0x0000000000000012."...

CVE-2017-10768

XnView Classic for Windows v2.40 is affected by CVE-2017-10768 via a crafted .rle file, enabling denial of service and potentially other unspecified impacts. Root cause references a faulting address scenario related to ntdll_77df0000!RtlpInsertFreeBlock+0x1ca. Affected product/component: XnView C...

CVE-2017-10752

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!RtlpLowFragHeapFree+0x000000000000001f."...

CVE-2017-10754

CVE-2017-10754 affects XnView Classic for Windows v2.40. A crafted .rle file may trigger a denial of service (and potentially unspecified impact) due to a buffer overflow related to Data from Faulting Address and control flow in ntdll. CNVD describes a buffer overflow vulnerability in XnView Clas...

CVE-2017-10764

XnView Classic for Windows Version 2.40 is vulnerable to a denial-of-service (and possibly other impact) via a crafted .rle file. The CVE description links the issue to Data from Faulting Address controlling Branch Selection starting at COMCTL32!Tab_OnGetItem+0x2f, indicating a potential fault-ad...

CVE-2017-10781

XnView Classic for Windows 2.40 is affected by CVE-2017-10781. The issue allows a crafted .rle file to cause a denial of service and potentially other unspecified impact, tied to Data from Faulting Address controlling Branch Selection starting at ntdll_77df0000!LdrpFindLoadedDllByName+0x0a5. No c...

gdal: Heap-buffer-overflow in LercNS::RLE::decompress

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4726197688729600 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x62a0000119...

gdal: Heap-buffer-overflow in LercNS::RLE::readCount

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6684589630160896 Project: gdal Fuzzer: libFuzzergdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x607000001177 Crash State:...

gdal: Heap-buffer-overflow in LercNS::RLE::decompress

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5114295765434368 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Debian DLA-953-1 : graphicsmagick security update

Chris Evans discovered that graphicsmagick used uninitialized memory in the RLE decoder, allowing an remote attacker to leak sensitive information from process memory space. More information are available at: https://scarybeastsecurity.blogspot.de/2017/05/bleed-continues-18-byte...

[SECURITY] [DLA 953-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u7 CVE ID : CVE-2017-9098 Debian Bug : 862967 Chris Evans discovered that graphicsmagick used uninitialized memory in the RLE decoder, allowing an remote attacker to leak sensitive information from process memory space. More information are...

CVE-2017-9144

In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...

AutoTrace heap buffer overflow vulnerability (CNVD-2017-08476)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap buffer overflow vulnerability exists in the 'rlefread' function in input-tga.c:252:15 of the libautotrace.a file in AutoTrace version 0.31.1. An attacker could exploit this vulnerability to execute...

UBUNTU-CVE-2017-9191

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rlefread function in input-tga.c:252:15...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be triggered by running a RLE image through coders/rle.c and leveraging a flaw in the end of file handling...

PT-2017-18773 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer overflow in the rle fread function, located in the input-tga.c file. This function is part of the AutoTrace library, specifically libautotrace.a. The overflow...

18-Byte ImageMagick Hack Could Have Leaked Images From Yahoo Mail Server

After the discovery of a critical vulnerability that could have allowed hackers to view private Yahoo Mail images, Yahoo retired the image-processing library ImageMagick. ImageMagick is an open-source image processing library that lets users resize, scale, crop, watermarking and tweak images. The...