14946 matches found
[SECURITY] [DLA 1378-1] tiff3 security update
Package : tiff3 Version : 3.9.6-11+deb7u11 CVE ID : CVE-2018-8905 Debian Bug : 893806 A heap-based buffer overflow was discovered in the LZWDecodeCompat function in tiflzw.c LibTIFF 4.0.9 and earlier. This vulnerability might be leveraged by remote attackers to crash the client via a crafted TIFF...
FreeBSD : wavpack -- multiple vulnerabilities (50210bc1-54ef-11e8-95d9-9c5c8e75236a)
Sebastian Ramacher reports : A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service attack or possibly have unspecified other impact via a maliciously crafted RF64 file. The...
Debian DLA-1378-1 : tiff3 security update
A heap-based buffer overflow was discovered in the LZWDecodeCompat function in tiflzw.c LibTIFF 4.0.9 and earlier. This vulnerability might be leveraged by remote attackers to crash the client via a crafted TIFF LZW file. For Debian 7 'Wheezy', these problems have been fixed in version...
CVE-2018-10779
An integer overflow has been discovered in libtiff in TIFFSetupStrips:tifwrite.c, which could lead to a heap-based buffer overflow in TIFFWriteScanline:tifwrite.c. An attacker may use this vulnerability to corrupt memory or cause Denial of Service...
CVE-2018-10780
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...
CVE-2018-10999
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
CVE-2018-10999
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
CVE-2018-10999
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
CVE-2018-10999
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
openSUSE Security Update : ImageMagick (openSUSE-2018-442)
This update for ImageMagick fixes the following issues : - CVE-2017-14325: In ImageMagick, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allowed attackers to cause a denial of service memory consumption in ReadMPCImage in coders/mpc.c via a craft...
Heap overflow
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted file...
CVE-2018-10972
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted file...
CVE-2018-10972
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted file...
CVE-2018-10972
The CVE-2018-10972 entry concerns Free Lossless Image Format (FLIF) 0.3. The vulnerability lies in the TransformPaletteC::process function (transform/palette_C.hpp), which can be triggered by a crafted file to cause a heap-based buffer overflow and denial of service. The available connected docum...
SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:1180-1)
This update for tiff fixes the following issues : - CVE-2017-9935: There was a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:1178-1)
This update for ImageMagick fixes the following issues : - CVE-2017-14325: In ImageMagick, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allowed attackers to cause a denial of service memory consumption in ReadMPCImage in coders/mpc.c via a craft...
SUSE SLES11 Security Update : tiff (SUSE-SU-2018:1179-1)
This update for tiff fixes the following issues : - CVE-2016-9453: The t2preadwritepdfimagetile function allowed remote attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a JPEG file with a TIFFTAGJPEGTABLES of length one bsc1011107. -...
Denial Of Service (DoS) Through Heap Buffer Overflow
libexiv2.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in the Exiv2::l2Data function of types.cpp where processing a malicious file will cause a denial of service DoS through a heap-based buffer overflow issue...