3742 matches found
CVE-2018-15387
A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a system image signed with a...
SUSE-SU-2018:2977-1 Security update for ImageMagick
This update for ImageMagick fixes the following security issues: - CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel function leading to DoS bsc1106989 - CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty function leading to DoS bsc1106858. -...
CVE-2018-3998
An exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause an undersized allocation, resulting in an overflow when the application tries to copy...
CVE-2018-3999
An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a...
Heap overflow
An exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause an undersized allocation, resulting in an overflow when the application tries to copy...
PT-2018-16363 · Atlantis · Atlantis Word Processor
Name of the Vulnerable Software and Affected Versions: Atlantis Word Processor version 3.2.5.0 Description: A heap-based buffer overflow issue exists in the Windows enhanced metafile parser. It can be triggered by a specially crafted image embedded within a document, causing an undersized...
PT-2018-16364 · Atlantis · Atlantis Word Processor
Name of the Vulnerable Software and Affected Versions: Atlantis Word Processor version 3.2.5.0 Description: A stack-based buffer overflow issue exists in the JPEG parser. It can be triggered by a specially crafted image embedded within a document, causing a length miscalculation and underflow. Th...
CVE-2018-17229
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...
Security update for GraphicsMagick (low)
This update for GraphicsMagick fixes the following issues: - CVE-2018-16644: Added missing check for length in the functions ReadDCMImage and ReadPICTImage, which allowed remote attackers to cause a denial of service via a crafted image bsc1107609 - CVE-2018-16645: Prevent excessive memory...
Exiv2 heap buffer overflow vulnerability (CNVD-2018-19608)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A heap buffer overflow vulnerability exists in the...
Exiv2 heap buffer overflow vulnerability (CNVD-2018-19609)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A heap buffer overflow vulnerability exists in the...
PYSEC-2018-136
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...
CVE-2018-17229
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...
Heap overflow
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...
PYSEC-2018-137
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...
CVE-2018-17229
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...
CVE-2018-17230
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...
CVE-2018-17230
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...
CVE-2018-17230
Exiv2 vulnerability CVE-2018-17230 affects Exiv2 0.26: a heap-based buffer overflow in Exiv2::ul2Data (types.cpp) allows remote crafting of an image to cause denial of service. Affected product/version in public advisories is Exiv2 0.26; fixes are in the 0.27.2 line (per multiple advisories). Mit...
