3729 matches found
EulerOS 2.0 SP1 : python-pillow (EulerOS-SA-2017-1049)
According to the version of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in python-pillow. A crafted image file with negative dimensions could cause a buffer to be under-allocated, leading...
CVE-2015-7555
Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service program crash via crafted image and logical screen width fields in a GIF file...
Design/Logic Flaw
The bmprreaduncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service memory consumption via a crafted image...
CVE-2017-8325
The iwprocesscolstointermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-8326
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c a...
CVE-2017-8327
The bmprreaduncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service memory consumption via a crafted image...
Code injection
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c a...
CVE-2017-8326
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c a...
CVE-2017-8327
The bmprreaduncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service memory consumption via a crafted image...
CVE-2017-8326
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c a...
Debian DLA-912-1 : tiff3 security update
Multiple security issues have been found in the tiff3 image library that may allow remote attackers to cause a denial of service application crash, to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted image. For Debian 7 'Wheezy', these...
Amazon Linux AMI : GraphicsMagick (ALAS-2017-820)
The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file.CVE-2017-6335 The WPG format reader in GraphicsMagick 1.3.2...
ALPINE-CVE-2016-5010
coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF file...
The vulnerability of the Mac OS X operating system and the iOS operating system allows a perpetrator to trigger a service failure.
The vulnerability of the CoreGraphics component in the Mac OS X and iOS operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted image...
Debian DLA-902-1 : imagemagick security update
Two security vulnerabilities were discovered in imagemagick that allow remote attackers to cause a denial of service application crash and infinite loop or possibly other unspecified impact via a crafted image. For Debian 7 'Wheezy', these problems have been fixed in version 8:6.7.7.10-5+deb7u13...
CVE-2010-1816
Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted image...
CVE-2017-7606
coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
Out-of-bounds
The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read via a crafted image file...
