Adobe Acrobat Pro DC ImageConversion EMF JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Adobe Acrobat Pro DC ImageConversion XPS JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Computerinsel Photoline ANI Parsing Code Execution Vulnerability

Summary A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this...

CVE-2018-13872

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5Gentdecode in H5Gent.c...

Heap overflow

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5Gentdecode in H5Gent.c...

CVE-2018-13871

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5FLblkmalloc in H5FL.c...

CVE-2018-13872

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer overflow in the function H5Gentdecode in H5Gent.c...

CVE-2018-13871

CVE-2018-13871 affects HDF5 1.8.20. A heap-based buffer overflow in H5FL_blk_malloc (H5FL.c) has been identified, per OSV/NVD records. Severity is high (CVSS3 9.8 / CRITICAL). Concrete impact details beyond overflow are not provided in the connected docs. Affected component: HDF5 1.8.20 library; ...

CVE-2018-13794

A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...

CVE-2018-13794

A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...

CVE-2018-13794

A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...

CVE-2018-13794

CVE-2018-13794 affects catimg 2.4.0 due to a heap-based buffer overflow in the function stbi__bmp_load_cont in stb_image.h. The issue is described across multiple connected entries as a heap overflow in the BMP loader, with no explicit exploitation details provided in the documents. The CVSS info...

openSUSE Security Update : unzip (openSUSE-2018-709)

This update for unzip fixes the following issues : - CVE-2014-9636: Prevent denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression bsc914442 -...

Debian: Security Advisory (DLA-1411-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1411-1 : tiff security update

Several issues were discovered in TIFF, the Tag Image File Format library, that allowed remote attackers to cause a denial of service or other unspecified impact via a crafted image file. CVE-2017-11613: DoS vulnerability A crafted input will lead to a denial of service attack. During the TIFFOpe...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:1851-1)

This update for ImageMagick fixes the following issues: These security issues were fixed : - CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint function bsc1056277. - CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken function that allowed remote attackers t...

CVE-2018-13037

An issue was discovered in jpeg-compressor 0.1. The bmpload function in stbimage.c allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact...

CVE-2018-13037

An issue was discovered in jpeg-compressor 0.1. The bmpload function in stbimage.c allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact...

CVE-2018-13037

CVE-2018-13037 affects jpeg-compressor 0.1, where the bmp_load function in stb_image.c is vulnerable to a heap-based buffer overflow that can cause a denial of service and potentially other impacts. The issue is described as exploitable by remote attackers (per CVE records), with network attack v...

openSUSE: Security Advisory for tiff (openSUSE-SU-2018:1834-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...