741 matches found
UBUNTU-CVE-2017-9191
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rlefread function in input-tga.c:252:15...
UBUNTU-CVE-2017-9195
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27...
UBUNTU-CVE-2017-9196
libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7...
CVE-2017-9199
CVE-2017-9199 affects AutoTrace 0.31.1 (libautotrace.a) with a fault in input-tga.c:192:19 where an operation cannot be represented in type int, leading to denial of service. Multiple sources (CNVD, Red Hat, SUSE/Nessus context) describe this as a DoS vulnerability in the AutoTrace bitmap/tga pro...
CVE-2017-9194
CVE-2017-9194 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer over-read exists in the ReadImage function (input-tga.c:559:29). CVSS data in the initial entry flags a network attack vector with no authentication and partial confidentiality/integrity/availability impact (base scores ...
CVE-2017-9193
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33...
PT-2017-18775 · None +2 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function. This function is located in the input-tga.c file. The estimated number of...
PT-2017-18780 · None +1 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a "cannot be represented in type int" problem in the input-tga.c file at line 508:18 of the libautotrace.a library in AutoTrace. Recommendations: For AutoTrace version 0.31.1, at t...
PT-2017-18774 · Autotrace +1 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer overflow in the ReadImage function, located in the input-tga.c file. This overflow occurs at line 528, column 7, of the input-tga.c file in the libautotrace.a...
PT-2017-18776 · None +2 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function. This function is located in the input-tga.c file. The estimated number of...
PT-2017-18779 · None +2 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a "cannot be represented in type int" problem in the input-tga.c file of AutoTrace. Recommendations: For AutoTrace version 0.31.1, at the...
CVE-2016-6906
The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...
The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure
The vulnerability of the console-based graphic editor ImageMagick is related to the repeated release of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure termination of the application through the use of a specially created tga forma...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass tga files to the system to cause assertion failures, leading to the system crashing...
ImageMagick 6.x < 6.9.7-5 / 7.x < 7.0.4-5 tga.c WriteTGAImage() Assertion Failure DoS
The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.7-5 or 7.x prior to 7.0.4-5. It is, therefore, affected by a denial of service vulnerability in the WriteTGAImage function in coders/tga.c due to improper handling of TGA files. An unauthenticated, remote attacker...
ImageMagick Double Release Vulnerability
ImageMagick is a free software for creating, editing, and compositing images.The use of most of ImageMagick's features comes from the command line tools. A double-release vulnerability in encoder/ tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service applicatio...
CVE-2015-8894
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service application crash via a crafted tga file...
Double free
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service application crash via a crafted tga file...