Fedora 26 : gd (2017-7cc0e6a5f5)

Version 2.2.5 - 2017-08-30 - Security - Double-free in gdImagePngPtr. CVE-2017-6362 - Buffer over-read into uninitialized memory. CVE-2017-7890 - Fixed - Fix 109: XBM reading fails with printed error - Fix 338: Fatal and normal libjpeg/ibpng errors not distinguishable - Fix 357: 2.2.4: Segfault i...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-24318)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'ReadXBMImage' function in the coders/xbm.c file in GraphicsMagick version 1.3.26. An attacker can exploit th...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-24317)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'ReadXBMImage' function in the coders/xbm.c file in GraphicsMagick version 1.3.26. An attacker can exploit th...

DEBIAN-CVE-2017-13777

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...

DEBIAN-CVE-2017-13776

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...

DEBIAN-CVE-2016-5116

gdxbm.c in the GD Graphics Library aka libgd before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent attackers to obtain sensitive information from process memory or cause a denial of service stack-based buffer under-read and application crash via a long name...

USN-3030-1: GD library vulnerabilities

It was discovered that the GD library incorrectly handled memory when using gdImageScaleTwoPass. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2013-7456 It was discovered that the GD library incorrectly handled certain...

Updated libgd packages fix security vulnerabilities

Updated libgd packages fix security vulnerabilities: The gdImageScaleTwoPass function in gdinterpolation.c in libgd before 2.2.0 uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated by a...

APPLE-SA-2014-06-30-3 iOS 7.1.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-3 iOS 7.1.2 iOS 7.1.2 is now available and addresses the following: Certificate Trust Policy Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: Update to the certificate trust policy...

CVE-2014-1354

CoreGraphics in Apple iOS before 7.1.2 does not properly restrict allocation of stack memory for processing of XBM images, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted image data...

Design/Logic Flaw

CoreGraphics in Apple iOS before 7.1.2 does not properly restrict allocation of stack memory for processing of XBM images, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted image data...

CVE-2014-1354

CVE-2014-1354 affects Apple iOS prior to 7.1.2, with CoreGraphics vulnerable to unbounded stack allocation while processing XBM images. This could let a remote attacker execute arbitrary code or trigger a denial of service via crafted image data. Apple’s security bulletin APPLE-SA-2014-06-30-3 co...

CVE-2014-1354

CoreGraphics in Apple iOS before 7.1.2 does not properly restrict allocation of stack memory for processing of XBM images, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted image data...

Ubuntu 6.06 LTS : firefox vulnerabilities (USN-645-2)

USN-645-1 fixed vulnerabilities in Firefox and xulrunner for Ubuntu 7.04, 7.10 and 8.04 LTS. This provides the corresponding update for Ubuntu 6.06 LTS. Justin Schuh, Tom Cross and Peter Williams discovered errors in the Firefox URL parsing routines. If a user were tricked into opening a crafted...

SuSE 11.1 / 11.2 Security Update : gtk2 (SAT Patch Numbers 6389 / 6390)

The following issue has been fixed : - Specially crafted GIF and XBM files could have crashed gtk2 CVE-2012-2370 / CVE-2011-2485 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

CentOS Update for gtk2 CESA-2013:0135 centos5

Check for the Version of gtk2 OpenVAS Vulnerability Test CentOS Update for gtk2 CESA-2013:0135 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Scientific Linux Security Update : gtk2 on SL5.x i386/x86_64 (20130108)

An integer overflow flaw was found in the X BitMap XBM image file loader in GTK+. A remote attacker could provide a specially crafted XBM image file that, when opened in an application linked against GTK+ such as Nautilus, would cause the application to crash. CVE-2012-2370 This update also fixes...

RedHat Update for gtk2 RHSA-2013:0135-01

Check for the Version of gtk2 OpenVAS Vulnerability Test RedHat Update for gtk2 RHSA-2013:0135-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

gtk2 security update

CentOS Errata and Security Advisory CESA-2013:0135 Updated gtk2 packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...

gdk-pixbuf: DoS (GLib error and application abort) due to an integer overflow in the XBM image file format loader

Multiple integer overflows in the readbitmapfiledata function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service application crash via a negative 1 height or 2 width in an XBM file, which triggers a heap-based buffer overflow...