Updated python-pillow packages fix security vulnerability

A buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening a specially crafted invalid TIFF file CVE-2016-0740. A buffer overflow in FliDecode.c causing a segfault when opening FLI files CVE-2016-0775. A buffer overflow in PcdDecode.c causing a segfault...

FreeBSD : py-imaging, py-pillow -- Buffer overflow in FLI decoding code (6ea60e00-cf13-11e5-805c-5453ed2e2b49)

The Pillow maintainers report : In all versions of Pillow, dating back at least to the last PIL 1.1.7 release, FliDecode.c has a buffer overflow error. There is a memcpy error where x is added to a target buffer address. X is used in several internal temporary variable roles, but can take a value...

py-imaging, py-pillow -- Buffer overflow in FLI decoding code

The Pillow maintainers report: In all versions of Pillow, dating back at least to the last PIL 1.1.7 release, FliDecode.c has a buffer overflow error. There is a memcpy error where x is added to a target buffer address. X is used in several internal temporary variable roles, but can take a value ...

CVE-2015-8572

Multiple buffer overflows in Autodesk Design Review ADR before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a 1 BMP or 2 FLI file, 3 encoded scan lines in a PCX file, or 4 DataSubBlock or 5 GlobalColorTable in a GIF file...

Buffer overflow

Multiple buffer overflows in Autodesk Design Review ADR before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a 1 BMP or 2 FLI file, 3 encoded scan lines in a PCX file, or 4 DataSubBlock or 5 GlobalColorTable in a GIF file...

CVE-2015-8572

CVE-2015-8572 affects Autodesk Design Review (ADR). Public details describe multiple buffer overflow vulnerabilities in ADR prior to the 2013 Hotfix 2, exploitable via crafted image data: (1) BMP or (2) FLI files, (3) encoded scan lines in PCX files, or (4) DataSubBlock or (5) GlobalColorTable in...

CVE-2015-8572

Multiple buffer overflows in Autodesk Design Review ADR before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a 1 BMP or 2 FLI file, 3 encoded scan lines in a PCX file, or 4 DataSubBlock or 5 GlobalColorTable in a GIF file...

Autodesk Design Review FLI RLE Remote Code Execution Vulnerability

Autodesk Design Review is free DWF viewer software. A security vulnerability exists in Autodesk Design Review's handling of FLI files due to a failure to ensure that execution length encoded data is written outside of an allocated buffer. An attacker could exploit this vulnerability to execute...

Autodesk Design Review FLI RLE Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Apple QuickTime FLI LinePacket - Remote Code Execution Vulnerability

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-18-apple-quicktime-fli-linepacket-remote-code-execution-vulnerability/ ''' ''' Title : Apple QuickTime FLI...

xnview <= 1.98.5 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: XnView http://www.xnview.com Versions: = 1.98.5 Platforms: Windows Bugs: A integer overflow in width/height calculation B jpeg heap overflow C ICO heap overflow D PCX heap overflow E FLI heap overflow Exploitation: via file Date: 16 F...

xnview 1.98.5 - Multiple Vulnerabilities

xnview 1.98.5 - Multiple Vulnerabilities Luigi Auriemma Application: XnView http://www.xnview.com Versions: = 1.98.5 Platforms: Windows Bugs: A integer overflow in width/height calculation B jpeg heap overflow C ICO heap overflow D PCX heap overflow E FLI heap overflow Exploitation: via file Date...

xnview 1.98.5 - Multiple Vulnerabilities

Luigi Auriemma Application: XnView http://www.xnview.com Versions: = 1.98.5 Platforms: Windows Bugs: A integer overflow in width/height calculation B jpeg heap overflow C ICO heap overflow D PCX heap overflow E FLI heap overflow Exploitation: via file Date: 16 Feb 2012 Author: Luigi Auriemma...

Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability

Exploit for windows platform in category dos / poc ================================================================== Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability ================================================================== Title : Apple QuickTime FLI LinePacket Remote...

Apple QuickTime FLI LinePacket - Remote Code Execution

Apple QuickTime FLI LinePacket - Remote Code Execution ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-18-apple-quicktime-fli-linepacket-remote-code-execution-vulnerability/ ''' ''' Title :...

Apple QuickTime FLI LinePacket - Remote Code Execution

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-18-apple-quicktime-fli-linepacket-remote-code-execution-vulnerability/ ''' ''' Title : Apple QuickTime FLI LinePacket Remote Code Execution...

Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2006-7222

The CVE-2006-7222 entry affects Media Player Classic (MPC) 6.4.9.0 . The vulnerability is a buffer overflow in the function CFLICStream::_deltachunk of FLICSource.cpp, enabling a remote attacker to execute arbitrary code when processing a crafted FLI file . The description indicates the vector is...

Media Player Classic FLI文件处理远程缓冲区溢出漏洞

BUGTRAQ ID: 25437 Media Player Classic是一个免费的基于WMP的播放程序，支持几乎所有媒体格式。 Media Player Classic处理fli文件时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 在FLICSource.cpp文件中的以下函数： 690 void CFLICStream::deltachunk 691 692 BYTE tmp = mpFrameBuffer; //mpFrameBuffer 的长度为mhdr.xmhdr.y323， //注意mhdr.x，mhdr.y是从一个fli文件中读出的,是我们能控制的 693 6...

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow

Media Player Classic 6.4.9 - FLI File Remote Buffer Overflow source: https://www.securityfocus.com/bid/25437/info Media Player Classic is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data. Attackers may attempt to exploit this issue...