GDK-PixBuf security vulnerabilities

Buffer overflow, integer overflow, on graphic formats processing...

The vulnerability of the Android operating system allows a hacker to execute arbitrary code using specially crafted MP3 or MP4 files.

The vulnerability of the libstagefright library in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted MP3 or MP4 file headers...

Android Arbitrary Code Execution Vulnerability

Android is an operating system based on the Linux open kernel. Android has been disclosed to have an arbitrary code execution vulnerability that allows remote attackers to execute arbitrary code via metadata in specially crafted MP3 or MP4 files...

[SECURITY] Fedora 21 Update: freeimage-3.10.0-23.fc21

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

[SECURITY] Fedora 22 Update: freeimage-3.10.0-23.fc22

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

[SECURITY] Fedora 23 Update: freeimage-3.17.0-1.fc23

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

Phabricator: Information leakage through Graphviz blocks

This report amounts to Unsandboxed Command Execution Considered Harmful, which you already suspected: https://secure.phabricator.com/T7785 Graphviz blocks can be used to view a render of any image file readable by the webserver, through the image and shapefile graph node attributes. This alone...

Android Stagefright Exploit Code Released to Public

Joshua Drake, the researcher who found the so-called Stagefright vulnerability in Android, today released exploit code to the public, which he hopes will be used to test systems’ exposure to the flaw. The move comes more than a month after vulnerability details were released in August during...

The vulnerability of the Mac OS X operating system, which allows a hacker to read arbitrary files

The vulnerability of the Text Formats component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a text file containing XML links to external objects...

CVE-2015-3762

The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

Xxe

The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2015-3762

CVE-2015-3762 affects Apple OS X Text Formats/TextEdit prior to 10.10.5. The issue is an XXE in XML parsing that can allow a remote attacker to read arbitrary files via a text file containing an XML external entity declaration with an entity reference. Root cause: XML External Entity handling in ...

CVE-2015-3762

The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

Out-of-bounds read with malformed MP3 file — Mozilla

Security researcher Aki Helin used the Address Sanitizer tool to discover an out-of-bounds read during playback of a malformed MP3 format audio file which switches sample formats. This could trigger a potentially exploitable crash or the reading of out-of-bounds memory content in some circumstanc...

UBUNTU-CVE-2015-4475

The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a malformed file...

Uninstall the browser Flash can really eradicate Flash vulnerabilities? - Vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-7/201572110550961.jpg Poor antique Adobe Flash seems to have been to endure endless 0day attacks, as well as endless official patch update. In our hearts, it seems to have been saddled with a bad reputation. No wonder now Adobe Flash is a rat crossing the street, everyon...

[SECURITY] Fedora 22 Update: rawstudio-2.1-0.1.20150511git983bda1.fc22

Rawstudio is a highly specialized application for processing RAW images from digital cameras. It is not a fully featured image editing application. The RAW format is often recommended to get the best quality out of digital camera images. The format is specific to cameras and cannot be read by mos...

Johnny - GUI for John the Ripper

Johnny is a cross-platform open-source GUI for the popular password cracker John the Ripper. Features 1. user could start, pause and resume attack though only one session is allowed globally, 2. all attack related options work, 3. all input file formats are supported pure hashes, pwdump, passwd,...

Apple QuickTime multiple security vulnerabilities

Multiple memory corruptions on different formats handling...

Nikto2 - Web Server Scanner

Nikto is an Open Source GPL web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks...