Oracle Solaris Third-Party Patch Update : gimp (cve_2012_3236_buffer_overflow)

The remote Solaris system is missing necessary patches to address security updates : - fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed XTENSION header of a .fit file, as demonstrated using a long...

Null pointer dereference

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed XTENSION header of a .fit file, as demonstrated using a long string...

CVE-2012-3236

CVE-2012-3236 affects GIMP via fits-io.c: fits-io.c in GIMP before 2.8.1 allows a remote attacker to cause a denial of service (NULL pointer dereference and crash) by presenting a malformed FIT header in a .fit file. Connected advisories (Mandriva/openSUSE/SUSE/OpenVAS/NASL entries) confirm remed...

CVE-2012-3236

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed XTENSION header of a .fit file, as demonstrated using a long string...

Fedora 14 : nip2-7.24.2-1.fc14 / vips-7.24.7-2.fc14 (2011-10781)

7.24 series. Run-time code generation Open via disc mode Workspace as Graph mode for nip2 FITS image format VIPS rewrite Better nibs in paintbox Better TIFF and JPEG load Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

Stack overflow

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

CVE-2009-0254

CVE-2009-0254 involves a stack-based buffer overflow in easyHDR PRO 1.60.2 triggered by processing an invalid FITS file. The vulnerability could allow a user‑assisted attacker to execute arbitrary code, with the NVD entry modeling it as a network‑vector issue and providing a high impact. The conn...

Code injection

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

GraphicsMagick多个拒绝服务漏洞

BUGTRAQ ID: 30055 GraphicsMagick是一个简单的图像处理工具。 GraphicsMagick的AVI、AVS、DCM、EPT、FITS、MTV、PALM、RLA和TGA解码器中存在多个漏洞，可能触发崩溃、分配过多内存或执行死循环。 GraphicsMagick的magick/image.c文件中的GetImageCharacteristics函数中存在漏洞，如果用户受骗打开了特制的PNG、JPEG、BMP或TIFF文件的话，就会导致崩溃。 GraphicsMagick Group GraphicsMagick 1.2.3 GraphicsMagick Grou...