ani-market.fr XSS vulnerability

Open Bug Bounty ID: OBB-684543 Description| Value ---|--- Affected Website:| ani-market.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Computerinsel Photoline Stack Buffer Overflow Vulnerability (CNVD-2018-17434)

Computerinsel Photoline is a suite of image editing software. A stack buffer overflow vulnerability exists in the ANI parsing feature in Computerinsel Photoline version 20.54. An attacker can exploit this vulnerability by sending a specially crafted ANI image to overwrite arbitrary data and execu...

Memory corruption

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and...

CVE-2018-3922

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and...

CVE-2018-3922

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and...

CVE-2018-3922

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and...

CVE-2018-3922

CVE-2018-3922 : A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54 (OS X). A specially crafted ANI image can trigger a stack/heap overflow via a faulty length/header handling in the ANI parser, overwriting arbitrary data and potentially enab...

PT-2018-16314 · Computerinsel · Photoline

Name of the Vulnerable Software and Affected Versions: Computerinsel Photoline version 20.54 Description: A memory corruption issue exists in the ANI-parsing functionality. Processing a specially crafted ANI image can cause a stack overflow, allowing an attacker to overwrite arbitrary data and...

Vulnerability Spotlight: Computerinsel Photoline Multiple Vulnerabilities

Vulnerabilities discovered by Tyler Bohan from Talos Overview Today, Cisco Talos is disclosing several vulnerabilities in Computerinsel Photoline. Photoline is an image-processing tool used to modify and edit images, as well as other graphic-related material. This product has a sizable user base...

Computerinsel Photoline ANI Parsing Code Execution Vulnerability

Summary A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this...

IrfanView buffer overflow vulnerability (CNVD-2017-27602)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit. A local attacker can exploit this...

CVE-2017-14578

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ani file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4."...

Design/Logic Flaw

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ani file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4."...

CVE-2017-14578

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ani file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4."...

Cisco IOS XE ANI Registrar DoS (cisco-sa-20170320-ani)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Autonomic Networking Infrastructure ANI registrar feature due to incomplete input validation of certain crafted packets. An unauthenticated,...

Cisco IOS XE ANI IPv6 Packets DoS (cisco-sa-20170320-aniipv6)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Autonomic Networking Infrastructure ANI component due to incomplete input validation of certain crafted IPv6 packets. An unauthenticated, remote...

Cisco IOS ANI IPv6 Packets DoS (cisco-sa-20170320-aniipv6)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Autonomic Networking Infrastructure ANI component due to incomplete input validation of certain crafted IPv6 packets. An unauthenticated, remote...

CVE-2017-3849

Cisco IOS and IOS XE ANI Registrar Denial of Service (CVE-2017-3849) affects the Autonomic Networking Infrastructure (ANI) registrar feature in Cisco IOS/IOS XE where incomplete input validation of crafted packets can be exploited by an unauthenticated, adjacent attacker. Conditions: device runs ...

CVE-2017-3850

Cisco IOS/IOS XE ANI IPv6 Denial of Service (CVE-2017-3850): An unauthenticated attacker can cause a DoS by sending crafted IPv6 packets to devices with ANI enabled and a reachable IPv6 interface. The issue stems from incomplete input validation in ANI; affected releases include IOS 15.4–15.6 and...

Cisco IOS Software IPv6 Denial of Service Vulnerability (cisco-sa-20170320-aniipv6)

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...