NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial...

Artifex GSView Denial of Service Vulnerability

GSView is a user-friendly viewer for viewing documents in a variety of formats, including Postscript, PDF, XPS, EPUB version 2, DRM-free, CBZ, JPEG and PNG files. Artifex GSView suffers from a denial of service vulnerability that could allow an attacker to cause a denial of service via a speciall...

CVE-2017-9875

IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!DEDecode+0x0000000000000cdb."...

Silicon Graphics LibTIFF 'TIFFWriteDirectoryTagCheckedLong8Array' Function Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in the 'TIFFWriteDirectoryTagCheckedLong8Array' function in...

Multiple Dell iDRAC Product Remote Format String Vulnerabilities

The Dell iDRAC7 and iDRAC8 are both remote access control cards from Dell USA. A remote format string vulnerability exists in multiple Dell iDRAC products. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of an application or cause a denial of service...

PDF Viewer Code Execution

The vulnerability of JPEG 2000 components in programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, is related to reading beyond the buffer limit and memory corruption due to image scaling. Exploiting this...

ImageWorsener 'iw_read_gif_file' Memory Disclosure Vulnerability

ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the 'iwreadgiffile' function in the imagew-gif.c file of libimageworsener.a in ImageWorsener version 1.3.0. A remote attacker can exploit this vulnerability to consume available memory with the he...

DEBIAN-CVE-2017-5510

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write...

UBUNTU-CVE-2016-5652

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means...

UBUNTU-CVE-2016-6906

The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap...

Adobe Reader and Acrobat Remote Code Execution Vulnerability (CNVD-2016-08999)

Adobe Reader and Acrobat are PDF file-related software: Adobe Reader is a free PDF file reader, Acrobat is a PDF file editing and conversion tools. A security vulnerability exists in Adobe Reader and Acrobat, which can be exploited by an attacker to execute arbitrary code in the context of the...

Mageia: Security Advisory (MGASA-2015-0463)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2015-4469

The chmdreadheaders function in chmd.c in libmspack before 0.5 does not validate name lengths, which allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted CHM file...

Digia Qt GIF File Denial of Service Vulnerability

Digia Qt is a cross-platform C++ application development framework. An error in the Digia Qt 'QGIFFormat::nextY' function gui/image/qgifhandler.cpp when processing GIF images allows remote attackers to conduct a denial of service and take control of applications that use the library...

BolinTech Dream FTP Server 1.0 User Name Format String Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication. The issue could crash t...

openSUSE Security Update : libvirt (openSUSE-SU-2010:0625-1)

libvirt did not properly handle configured disk formats which potenially allowed users to read arbitrary files CVE-2010-2237, CVE-2010-2238, CVE-2010-2239 Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host CVE-2010-2242. %NASLMINLEVEL 70300 C...

Interpretation of the Bible – exploits the intermediate level skills of analysis-vulnerability warning-the black bar safety net

Inscription: From the last update feel has been a long, long time, and what time less are excuses himself becomes the lazy's true, give us an apology, after the update will speed up, today do not speak the vulnerability analysis, with me to discuss the exploits of some of the principles on the...

Xion Audio Player 1.0.127 - '.aiff' Denial of Service

!/usr/bin/python ------------------------------------------------------------------- Xion Audio Player 1.0.127 .aiff Denial of Service Vulnerability found by condis Download : http://xion.r2.com.au/index.php?page=download Tested on : Windows XP SP3 Professional PL Registers : EAX 00000000 ECX...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...