SUSE-SU-2016:2681-1 Security update for php53

This update for php53 fixes the following issues: - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 - CVE-2016-6911: Check for out-of-bound read in dynamicGetbuf bsc1005274...

SUSE-SU-2016:2668-1 Security update for gd

This update for gd fixes the following security issues: - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

SUSE-SU-2016:2670-1 Security update for gd

This update for gd fixes the following issues: - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 - CVE-2016-6911: Check for out-of-bound read in dynamicGetbuf bsc1005274...

openSUSE Security Update : php5 (openSUSE-2016-1221)

This update for php5 fixes the following issu : - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924. - CVE-2016-7568: Integer overflow in the gdImageWebpCtx function in gdwebp.c libgd bsc1001900. - CVE-2016-6911: Check for out-of-bound read in dynamicGetbuf bsc1005274...

openSUSE: Security Advisory for php5 (openSUSE-SU-2016:2606-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for php5 (important)

This update for php5 fixes the following issu: - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924. - CVE-2016-7568: Integer overflow in the gdImageWebpCtx function in gdwebp.c libgd bsc1001900. - CVE-2016-6911: Check for out-of-bound read in dynamicGetbuf bsc1005274...

WS-2016-7065

An out of bound read in radare2 before 0.10.5 due to a missing bounds check. Successful exploitation could lead to memory leak...

MGASA-2016-0252 Updated graphicsmagick packages fix security vulnerability

A read out-of-bound in the parsing of gif files using GraphicsMagick CVE-2015-8808. - Infinite loop caused by converting a circularly defined svg file CVE-2016-5240. - Fix another case of CVE-2016-2317 heap buffer overflow in the MVG rendering code also impacts SVG. - arithmetic exception...

SUSE-SU-2016:1614-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2016-5118: popen shell vulnerability via special filenames bnc982178. - CVE-2013-4589: The ExportAlphaQuantumType function in export.c in GraphicsMagick might have allowed remote attackers to cause a denial of service crash via...

7Zip UDF CInArchive::ReadFileItem Code Execution Vulnerability

7Zip is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:7-zip:7-zip"; ifdescription...

[SECURITY] [DLA 510-1] p7zip security update

Package : p7zip Version : 9.20.1dfsg.1-4+deb7u2 CVE ID : CVE-2016-2335 Debian Bug : 824160 Marcin Icewall Noga of Cisco Talos discovered an out-of-bound read vulnerability in the CInArchive::ReadFileItem method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take...

DLA-510-1 p7zip - security update

Bulletin has no description...

[SECURITY] [DSA 3599-1] p7zip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3599-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 09, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3599-1 (p7zip - security update)

Marcin Icewall Noga of Cisco Talos discovered an out-of-bound read vulnerability in the CInArchive::ReadFileItem method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the execution of...

Debian DLA-484-1 : graphicsmagick security update (ImageTragick)

Several security vulnerabilities were discovered in graphicsmagick a tool to manipulate image files. GraphicsMagick is a fork of ImageMagick and also affected by vulnerabilities collectively known as ImageTragick, that are the consequence of lack of sanitization of untrusted input. An attacker wi...

MGASA-2016-0202 Updated p7zip packages fix CVE-2016-2335

Updated p7zip package fixes security vulnerability: An out of bound read vulnerability exists in the CInArchive::ReadFileItem method functionality of 7zip for handling UDF files that can lead to denial of service or code execution CVE-2016-2335...

p7zip: arbitrary code execution

CVE-2016-2334 arbitrary code execution An exploitable heap overflow vulnerability exists in the NArchive::NHfs::CHandler::ExtractZlibFile method functionality of 7zip that can lead to arbitrary code execution. Before decompression, ExtractZlibFile method read block size and its offset from file...

SUSE SLED12 / SLES12 Security Update : cairo (SUSE-SU-2016:1100-1)

This update for cairo fixes the following issues : - CVE-2016-3190: Fixed an out-of-bound read in the fillxrgb32lerpopaquespans function that might lead to a crash when processing a maliciously crafted image file bsc971964. Note that Tenable Network Security has extracted the preceding descriptio...

SUSE-SU-2016:1100-1 Security update for cairo

This update for cairo fixes the following issues: - CVE-2016-3190: Fixed an out-of-bound read in the fillxrgb32lerpopaquespans function that might lead to a crash when processing a maliciously crafted image file bsc971964...

Microsoft Internet Explorer 91011 - CDOMStringDataList::InitFromString Out-of-Bounds Read (MS15-112)

Microsoft Internet Explorer 91011 - CDOMStringDataList::InitFromString Out-of-Bounds Read MS15-112 !-- CVE-2015-6086 Out Of Bound Read Vulnerability Address Space Layout Randomization ASLR Bypass Improper handling of new line and white space character caused Out of Bound Read in...