Oracle OIT ImageExport libvs_bmp BMP BI_RLE8 Width Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0163 Oracle OIT ImageExport libvsbmp BMP BIRLE8 Width Code Execution Vulnerability July 19, 2016 CVE Number CVE-2016-3596 Description When parsing a specially crafted BMP file, an erroneous memory copy operation can cause a heap buffer overflow leading to...

Apple Core Graphics BMP Framework img_decode_read Remote Code Execution Vulnerability

SUMMARY An exploitable out of bounds write exists in the handling of BMP images on Apple OS X and iOS. A crafted BMP document can lead to an out of bounds write resulting in remote code execution. Vulnerability can be triggered via a saved BMP file delivered by other means when opened in any...

Foxit vulnerability: the 4 billion users at risk-vulnerability and early warning-the black bar safety net

! The popular PDF reader Foxit developers recently fixed a 1 2 at the risk of security vulnerabilities,these vulnerabilities may lead to remote code execution. This reader has about 4 million users,they think this is a Adobe Reader is the perfect alternative. The official fix for the windows and...

Foxit Reader ConvertToPDF BMP Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader ConvertToPDF BMP Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

[SECURITY] Fedora 23 Update: optipng-0.7.6-1.fc23

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

AD Picture Viewer Arbitrary Code Execution Vulnerability

AD Picture Viewer is a fast displaying picture viewer that allows users to organize graphic files with its file management features. An arbitrary code execution vulnerability exists in AD Picture Viewer. The software suffers from a memory corruption and buffer overflow when processing BMP images...

[SECURITY] Fedora 24 Update: optipng-0.7.6-1.fc24

OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...

Debian DLA-501-1 : gdk-pixbuf security update

It was discovered that the original fix for CVE-2015-7552 DLA-450-1 was incomplete. A heap-based buffer overflow in gdk-pixbuf, a library for image loading and saving facilities, fast scaling and compositing of pixbufs, allows remote attackers to cause a denial of service or possibly execute...

DLA-501-1 gdk-pixbuf - security update

Bulletin has no description...

CVE-2016-4065

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted 1 JPEG, 2 GIF, or 3 BMP image...

CVE-2016-4065

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted 1 JPEG, 2 GIF, or 3 BMP image...

CVE-2016-4065

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted 1 JPEG, 2 GIF, or 3 BMP image...

CVE-2016-4065

The CVE-2016-4065 issue affects Foxit Reader and Foxit PhantomPDF on Windows, where the ConvertToPDF plugin can trigger an out-of-bounds read in image handling (JPEG/GIF/BMP) when the gflags app is enabled, causing a denial of service (application crash). Affected versions are Foxit Reader/Phanto...

CVE-2015-7552

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

Heap overflow

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

CVE-2015-7552

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

CVE-2015-7552

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

CVE-2015-7552

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

Foxit Reader < 7.3.4 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 7.3.4. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists that is triggered when handling FlateDecode streams. An unauthenticated, remote attacker can exploit this, via a crafted PDF...