10 matches found
CImg Library Security Vulnerability
CImg Library is an open source C++ library for image processing organized by Davidtschumperlé Greyc. A security vulnerability exists in CImg Library version v2.9.3. The vulnerability is exploited by attackers to obtain sensitive information via specially crafted JPEG files...
Jizhicms 代码问题漏洞
Extreme Networks Technology JIZHICMS Extreme CMS is a set of open source content management system CMS of China's Extreme Networks Technology Company. Jizhicms v1.5 version of the existence of security vulnerabilities, attackers can take advantage of the vulnerability through the special .jpg fil...
USN-4549-1 imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain specially crafted image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or other unspecified impact. CVE-2019-1994...
GLSA-202003-38 : PECL Imagick: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-202003-38 PECL Imagick: Arbitrary code execution An out-of-bounds write vulnerability was discovered in the Imagick PHP extension. Impact : A remote attacker, able to upload specially crafted images which will get processed by...
The vulnerability of the JBIGDecode function in the library for viewing, editing, and converting TIFF files into LibTIFF files, related to writing beyond the buffer memory, allows attackers to cause service failures or execute arbitrary code.
The vulnerability of the JBIGDecode function “tifjbig.c” in the library for viewing, editing, and converting TIFF files related to LibTIFF is associated with errors that allow the execution of write operations beyond the buffer memory. Exploiting this vulnerability can enable an attacker to cause...
ImageMagick: Local file read
It was discovered that certain ImageMagick coders and pseudo-protocols did not properly prevent security sensitive operations when processing specially crafted images. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an...
Gentoo Security Advisory GLSA 201603-10
Gentoo Linux Local Security Checks SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.121452";...
Python-2.2-ImageOP-Integer-Overflow
Python's imageop module is prone to multiple integer-overflow vulnerabilities because it fails to properly bounds-check user-supplied input to ensure that integer operations do not overflow. To successfully exploit these issues, an attacker must be able to control the arguments to imageop...
SuSE 10 Security Update : XEmacs (ZYPP Patch Number 6413)
Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xeamcs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description...
MS10-043: Vulnerability in Canonical Display Driver Could Allow Remote Code Execution (2032276)
A flaw exists in the way the Microsoft Canonical Display Driver cdd.dll parses information copied from user mode to kernel mode. If the Windows Aero theme is enabled, an attacker who tricks a user on the affected host into viewing a specially crafted image using an application that uses the APIs...