135 matches found
CVE-2020-19471: Out-of-bounds Read
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...
ASB-A-156261521
In DecodeImage of dnglosslessjpeg.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
imagemagick: memory leak in function DecodeImage in coders/pcd.c
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...
ImageMagick: memory leak in DecodeImage in coders/pcd.c
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2019-1651)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
graphicsmagick:coder_PICT_fuzzer: Heap-buffer-overflow in DecodeImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5753808735174656 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPICTfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...
graphicsmagick:coder_PICT_fuzzer: Heap-buffer-overflow in DecodeImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5649205997862912 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPICTfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...
Xpdf heap buffer overflow vulnerability (CNVD-2019-21441)
Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the 'DCTStream::decodeImage' function of the Stream.cc file in Xpdf version 4.01.01. The vulnerability stems from a...
CVE-2019-13281
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of...
Heap overflow
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of...
CVE-2019-13281
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of...
CVE-2019-13281
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of...
CVE-2019-13281
CVE-2019-13281 affects Xpdf prior to the 4.02 release (e.g., 4.01.01) where a heap-based buffer overflow in DCTStream::decodeImage() writes to frameBuf during PDF decoding. The vulnerability can be triggered by a crafted PDF sent to pdftotext, enabling denial of service and information disclosure...
CVE-2019-13281: Out-of-bounds Write
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of...
EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-1679)
According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.CVE-2019-7175 - In ImageMagick before 7.0.8-25 and...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:1033-1)
This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel bsc1130330. CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage bsc1131317. CVE-2019-7175: Fixed multiple memory leaks in DecodeImag...
Security update for GraphicsMagick (low)
openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1058-1 Rating: low References: 1128649 Cross-References: CVE-2019-7175 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for...
CVE-2019-7175
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...
ImageMagick memory leak vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory disclosure vulnerability exists in DecodeImage in coders/pcd.c in ImageMagick 7.0.8-25 and prior versions. An...
