5262 matches found
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:3258-1)
This update for ImageMagick fixes the following issues : - CVE-2016-9556 Possible Heap-overflow found by fuzzing bsc1011130 - CVE-2016-9559 Possible NULL pointer access found by fuzzing bsc1011136 - CVE-2016-8707 Possible code execution in Tiff conver utility bsc1014159 - CVE-2016-8866 Memory...
Microsoft Internet Explorer 11 - MSHTML CPasteCommand::ConvertBitmaptoPng Heap Buffer Overflow (MS14-056)
Security Settings - Choose a zone - Scripting should prevent websites from programmatically copy/pasting an image. Disabling execution of scripts on web-pages altogether will have the same effect. Please note that neither option prevents a website from social engineering the user into typing a...
phpMyAdmin Denial of Service Vulnerability (CNVD-2016-12702)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A denial of service vulnerability exists in phpMyAdmin. phpMyAdmin's conversion feature allows users to trigger the server to launch a denial of service DoS attack...
CVE-2016-7881
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an object. Successful exploitation could lead to arbitrary code execution...
flash-plugin: multiple code execution issues fixed in APSB16-39
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClip class when handling conversion to an object. Successful exploitation could lead to arbitrary code execution...
PT-2016-2947 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 23.0.0.207 and earlier Adobe Flash Player versions 11.2.202.644 and earlier Description: The issue is related to an exploitable use after free vulnerability in the MovieClip class when handling conversion to an...
PDF Shaper Conversion Buffer Overflow
A buffer overflow vulnerability exists in PDF Shaper. The vulnerability is due to improper handling of file conversion. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file...
ImageMagick Convert Tiff Adobe Deflate Code Execution Vulnerability
Summary An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks’s convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution.. The vulnerability can be...
CentOS 7 : libguestfs (CESA-2016:2576)
An update for libguestfs and virt-p2v is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
libguestfs, lua, ocaml, perl, python, ruby, virt security update
CentOS Errata and Security Advisory CESA-2016:2576 An update for libguestfs and virt-p2v is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...
gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow
An integer overflow flaw, leading to a heap-based buffer overflow was found in the gdImagePaletteToTrueColor function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application or execute arbitrary code with the privileges of the user running that PHP application usin...
Microsoft SQL RDBMS Engine Elevation of Privilege Vulnerability
Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in the 2016 version of Microsoft SQL Server that stems from...
libguestfs and virt-p2v security, bug fix, and enhancement update
libguestfs 1:1.32.7-3 - Rebase to libguestfs 1.32 in RHEL 7.3 resolves: rhbz1218766 - The full tests are now run after the package has been built. - New tool and subpackage: virt-dib safe diskimage-builder replacement. - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg s...
Iceni Argus 'ipNameAdd()' function remote stack buffer overflow vulnerability
Iceni Technology Argus is a PDF conversion tool. A security vulnerability exists in the Iceni Argus 'ipNameAdd' function. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected application, which could also result in a denial of service...
RedHat Update for libguestfs and virt-p2v RHSA-2016:2576-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: libguestfs and virt-p2v security, bug fix, and enhancement update
An update for libguestfs and virt-p2v is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Artifex Software MuJS Memory Misreference Vulnerability
Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA. A memory misreference vulnerability exists in the RptoString function in previous versions of Artifex Software MuJS 5c337af4b3df80cf967e4f9f6a21522de84b392a, which can be exploited by an attacker to execute...
UBUNTU-CVE-2016-9114
There is a NULL Pointer Access in function imagetopnm of convert.c:1943jp2 of OpenJPEG 2.1.2. image-compscompno.data is not assigned a value after initializationNULL. Impact is Denial of Service...
[SECURITY] Fedora 25 Update: jasper-1.900.13-1.fc25
This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...