CVE-2019-9944

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames...

Design/Logic Flaw

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames...

CVE-2019-9944

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames...

CVE-2019-9944

In Open Microscopy Environment OMERO.server 5.0.0–5.6.0, the Bio-Formats feature enables an image file to carry embedded pathnames, permitting reading of files from imported image filesets that may bypass OMERO permissions restrictions. This is the concrete vulnerability described for CVE-2019-99...

Low: Red Hat Security Advisory: file security update

An update for file is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2020-13905

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4...

Design/Logic Flaw

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7...

Design/Logic Flaw

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4...

CVE-2020-13905

CVE-2020-13905 affects IrfanView 4.54, with a user‑mode write access violation starting at FORMATS!GetPlugInInfo+0x38ed4. The connected Red Hat and CVE records corroborate a vulnerability in IrfanView 4.54 but do not provide additional technical details such as impacted components beyond the plug...

CVE-2020-13905

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4...

Fedora: Security Advisory for libarchive (FEDORA-2020-d8278fe24d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: wireshark-3.2.4-1.fc31

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

Fedora: Security Advisory for libarchive (FEDORA-2020-94211d0a7d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: libarchive-3.4.3-1.fc32

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

Extreme View has a heap overflow vulnerability

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. Extreme Viewer suffers from a heap overflow vulnerability that can be exploited by attackers to cause a denial of service attack...

qt5-qtimageformats: QTgaFile CPU exhaustion

An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption...

Fuzzing ImageIO

Posted by Samuel Groß, Project Zero This blog post discusses an old type of issue, vulnerabilities in image format parsers, in a newer context: on interactionless code paths in popular messenger apps. This research was focused on the Apple ecosystem and the image parsing API provided by it: the...

August 11, 2015, update for Office 2010 (KB3054962)

August 11, 2015, update for Office 2010 KB3054962 This article describes update KB3054962 for Microsoft Office 2010 that was released on August 11, 2015. This update has a prerequisite. Improvements and fixes Fixes the following issue:When you open a file .xlsx, .pptx, or .docx and then save it a...

Adobe Digital Editions File Enumeration Vulnerability

Adobe Digital Editions DE is a set of e-book reading management software from the American company Audobee Adobe. The software supports open, read and manage PDF, XML, Flash and other formats. Adobe Digital Editions has a security vulnerability. An attacker can exploit the vulnerability to obtain...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists through multiple flaws found in the way FreeType handled fonts in various formats. If a specially-crafted font file was loaded by an application linked against FreeType, it could cause the application to crash...