CVE-2017-17557

In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to...

CVE-2017-17557

CVE-2017-17557: Foxit Reader < 9.1 and Foxit PhantomPDF

CVE-2017-2905

An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

DEBIAN-CVE-2017-2905

An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-14442

An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

CVE-2017-14442

An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

Integer overflow

An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

Out-of-Bounds

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Out-of-Bounds. An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow...

Stack overflow

An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

CVE-2017-2905

An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2905

CVE-2017-2905 affects Blender 2.78c, where an exploitable integer overflow in the BMP loading functionality can trigger a buffer overflow and execute code. A specially crafted BMP file could be provided as an asset via Blender’s sequencer to a user, leading to potential code execution in the appl...

CVE-2017-14442

An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

CVE-2017-14442

CVE-2017-14442 affects SDL2_image-2.0.2 BMP image rendering, causing a stack overflow that can lead to remote code execution when a specially crafted BMP image is processed. Public sources describe the vulnerability across multiple advisories (Debian DSA-4184-1, Mageia MGASA-2018-0454) and indica...

graphicsmagick/coder_BMP_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5694348680232960 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderBMPfuzzer Fuzz target binary: coderBMPfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Buffer Overread

libtiff.so is vulnerable to buffer overreads. The application does not properly validate biWidth and biHeight variable in bmp image headers which can cause buffer overreads in the application...

Foxit Reader BMP Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

Denial Of Service (DoS) Via Out-of-bounds(OOB) Read

libtiff.so is vulnerable to denial of serviceDoS attacks. The LZW encoding in tiflzw.c allows to input a malicious bmp image with parameter: -c lzw, leading to an out-of-bounds read...

Denial of Service Vulnerability in Good Photo Image Processing Software for Processing BMP Images

Good Photo is a multi-platform professional-grade image processing software developed by Chengdu Hengtu Technology Co. A memory corruption vulnerability exists in the processing of BMP images by Good Photo image processing software. An attacker can cause the program to crash by constructing a...

2345 Viewer Handles BMP Images with Denial of Service Vulnerability

2345 Viewer is one of the fastest and most format-compatible high-definition image viewing software. A denial-of-service vulnerability exists in the handling of BMP images in 2345 Chart Viewer. An attacker who exploits this vulnerability to construct a malformed BMP image can cause the program to...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a bmp file to the application, when used with the -c zip option, to cause a denial of service DoS through buffer over-read...