656 matches found
CVE-2016-10164
Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...
UBUNTU-CVE-2016-10164
Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...
USN-2987-1 GD library vulnerabilities | Cloud Foundry
USN-2987-1 GD library vulnerabilities Medium Vendor libgd2, Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description It was discovered that the GD library incorrectly handled certain color tables in XPM images. If a user or automated system were tricked into processing a speciall...
Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-2987-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2987-1 advisory. It was discovered that the GD library incorrectly handled certain color tables in XPM images. If a user or automated system were tricked into...
USN-2987-1: GD library vulnerabilities
It was discovered that the GD library incorrectly handled certain color tables in XPM images. If a user or automated system were tricked into processing a specially crafted XPM image, an attacker could cause a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS...
USN-2987-1 libgd2 vulnerabilities
It was discovered that the GD library incorrectly handled certain color tables in XPM images. If a user or automated system were tricked into processing a specially crafted XPM image, an attacker could cause a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS...
SUSE SLES11 Security Update : PHP5 (SUSE-SU-2014:0868-1)
PHP5 has been updated to fix two security vulnerabilities : - Heap-based buffer overflow in DNS TXT record parsing CVE-2014-4049 - NULL pointer dereference in GD XPM decoder CVE-2014-2497 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libgd2-xpm-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libgd2-xpm package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian DLA-189-1 : libgd2 security update
Multiple vulnerabilities were discovered in libgd2, a graphics library : CVE-2014-2497 The gdImageCreateFromXpm function would try to dereference a NULL pointer when reading an XPM file with a special color table. This could allow remote attackers to cause a denial of service crash via crafted XP...
Debian DSA-3215-1 : libgd2 - security update
Multiple vulnerabilities were discovered in libgd2, a graphics library : - CVE-2014-2497 The gdImageCreateFromXpm function would try to dereference a NULL pointer when reading an XPM file with a special color table. This could allow remote attackers to cause a denial of service crash via crafted...
PT-2014-9039 · Imagemagick +2 · Imagemagick +2
Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: A heap-based buffer overflow issue in ImageMagick allows remote attackers to have an unspecified impact via a crafted xpm file. Recommendations: At the moment, there is no information...
PT-2014-9049
Name of the Vulnerable Software and Affected Versions ImageMagick version 6.8.9-9 Description The issue allows remote attackers to cause a denial of service via a crafted xpm file. Recommendations For ImageMagick version 6.8.9-9, consider updating to a newer version to mitigate the risk of denial...
CVE-2014-9836
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file...
UBUNTU-CVE-2014-9821
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file...
UBUNTU-CVE-2014-9836
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file...
CVE-2014-9821
Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file...
gd: NULL pointer dereference in gdImageCreateFromXpm()
A NULL pointer dereference flaw was found in the gdImageCreateFromXpm function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application using gd via a specially crafted X PixMap XPM file...
gd: NULL pointer dereference in gdImageCreateFromXpm()
A NULL pointer dereference flaw was found in the gdImageCreateFromXpm function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application using gd via a specially crafted X PixMap XPM file...
