150 matches found
CVE-2017-2903: Integer Overflow or Wraparound
An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...
PT-2018-3125
Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description The issue is related to an integer overflow in the DPX loading functionality, which can lead to a buffer overflow. This can be exploited by using a specially crafted '.cin' file, potentially allowing an attack...
PT-2018-3126
Name of the Vulnerable Software and Affected Versions Blender version 2.78c Description An integer overflow exists in the DPX loading functionality, which can be exploited using a specially crafted '.cin' file. This can cause a buffer overflow, allowing for code execution under the context of the...
graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in WriteDPXImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4986470885490688 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in WriteDPXImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5747723505500160 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in WriteDPXImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=6609388652462080 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in WriteDPXImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5746013152215040 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in WriteDPXImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5744337318051840 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
Blender Sequencer dpxOpen Buffer Overflow Code Execution Vulnerability
Summary An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .cin file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...
Blender Sequencer imb_load_dpx_cineon Integer Overflow Code Execution Vulnerability
Summary An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .cin file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...
The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure.
The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure memory consumption through a specially...
ImageMagick 'ReadDPXImage' function memory leak vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'ReadDPXImage' function in the coders/dpx.c file in ImageMagick versions prior ...
DEBIAN-CVE-2017-11527
The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service memory consumption via a crafted file...
UBUNTU-CVE-2017-11527
The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service memory consumption via a crafted file...
CVE-2017-11188
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...
The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick allows a hacker to cause a system to run out of resources due to the central processor.
The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the central processor’s resources to be exhausted by using a specially...
Denial Of Service (DoS) Through Large Loop
ImageMagick is vulnerable to denial of service DoS attacks because of an infinite loop.The library does not properly check when a DPX file has ended, opting to iterate through the entire memory space of an unsigned integer. This can allow a malicious user to exhaust the application's resources by...
Design/Logic Flaw
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...
