107 matches found
CVE-2021-21493
SAP 3D Visual Enterprise Viewer 9 is affected by GIF parsing vulnerabilities (CVE-2021-21493). Multiple connected advisories (e.g., ZDI-21-289/296/290/293/297/295/291, etc.) describe memory corruption or out-of-bounds/write conditions in GIF file parsing that can lead to remote code execution. Ex...
CVE-2020-13572
A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this...
qt5-qtbase: QImage allocation failure in qgifhandler
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...
Arbitrary Code Execution Or Denial Of Service (DoS)
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
PYSEC-2019-210
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...
PYSEC-2019-235
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...
CVE-2019-9635
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, and Adobe Acrobat Document Cloud, related to the manipulation of the null pointer, allows attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud are related to the handling of the null pointer. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code using a...
The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created GIF file...
DEBIAN-CVE-2018-17436
ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...
Foxit Reader GIF DataSubBlock Out-of-Bounds Read Information Disclosure Vulnerability
Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the parsing of the DataSubBlock structure of GIF graphics, which can be exploited by an attacker to obtain sensitive information due to a lack of proper validation of user-supplied data...
ALPINE-CVE-2017-14450
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...
PT-2018-5052 · Corel · Core Photo-Paint X8
Name of the Vulnerable Software and Affected Versions: Core PHOTO-PAINT X8 version 18.1.0.661 Description: A memory corruption vulnerability exists in the GIF parsing functionality. This issue can be triggered by a specially crafted GIF file, potentially resulting in code execution. An attacker c...
UBUNTU-CVE-2017-18254
An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file...
PHP GD Graphics Library Denial of Service Vulnerability
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community.GD Graphics Library also known as libgd or libgd2 is an open source library for dynamically creating images developed by American software...
GNU Libextractor Denial of Service Vulnerability (CNVD-2018-00306)
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in GNU Libextractor version 1.6. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference and application crash...
CVE-2017-17440
GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...
DEBIAN-CVE-2017-17440
GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...
GraphicsGale Handles GIF File Memory Corruption Vulnerability
GraphicsGale is an image processing tool. GraphicsGale suffers from a memory corruption vulnerability when processing GIF images, which can be exploited to cause a program crash by constructing a malformed GIF image, and can lead to arbitrary code execution if successfully exploited...
CVE-2017-3050
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of GIF files. Successful exploitation could lead to arbitrary code execution...