CVE-2017-13747: Reachable Assertion

There is a reachable assertion abort in the function jpcfloorlog2 in jpc/jpcmath.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13746: Reachable Assertion

There is a reachable assertion abort in the function jpcdecprocesssiz in jpc/jpcdec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13726: Reachable Assertion

There is a reachable assertion abort in the function TIFFWriteDirectorySec in LibTIFF 4.0.8, related to tifdirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack...

CVE-2017-13752: Reachable Assertion

There is a reachable assertion abort in the function jpcdequantize in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

CVE-2017-13745: Reachable Assertion

There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154...

CVE-2017-13673: Reachable Assertion

The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service assertion failure in the cpuphysicalmemorysnapshotgetdirty function...

PT-2017-13072

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc dec process siz in jpc/jpc dec.c, which can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, conside...

openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2017:2271-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2017-13068

Name of the Vulnerable Software and Affected Versions JasPer version 2.0.12 Description The issue is related to a reachable assertion abort in the function jpc floorlog2 in jpc/jpc math.c. This can lead to a remote denial of service attack. Recommendations For JasPer version 2.0.12, consider...

PT-2017-3856

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to errors in handling JPEG images, specifically with the ReadOneJNGImage function in coders/png.c. This can be exploited by a remote attacker to cause a denial of service, resultin...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be conducted because there is a missing NULL check in the ReadMATImage function which leads to an assertion failure and application exit from within the DestroyImageInfo function...

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

CVE-2017-13658

Summary (CVE-2017-13658) ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3 is vulnerable due to a missing NULL check in ReadMATImage (coders/mat.c). This can trigger a denial of service (assertion failure and application exit) in DestroyImageInfo (MagickCore/image.c). Root cause is a NULL-checked...

CVE-2017-13658: Reachable Assertion

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

Design/Logic Flaw

In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service assertion failure in WriteBlobStream in MagickCore/blob.c via a crafted file...

CVE-2017-13132

In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service assertion failure in WriteBlobStream in MagickCore/blob.c via a crafted file...

CVE-2017-13132: Reachable Assertion

In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service assertion failure in WriteBlobStream in MagickCore/blob.c via a crafted file...

FreeBSD : pspp -- multiple vulnerabilities (6876b163-8708-11e7-8568-e8e0b747a45a)

CVE Details reports : - There is an Integer overflow in the hashint function of the libpspp library in GNU PSPP 0.10.5-pre2 CVE-2017-10791. - There is a NULL pointer Dereference in the function llinsert of the libpspp library in GNU PSPP 0.10.5-pre2 CVE-2017-10792. - There is an illegal address...

CVE-2017-12959

There is a reachable assertion abort in the function dictaddmrset in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack...