openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2018:3014-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-18581

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c...

CVE-2018-18581

LuPng (miniz/lupng.c) contains a heap-based buffer over-read in internalPrintf, present in LuPng up to 2017-03-10. Multiple sources (CNVD-2019-09762, NVD CVE-2018-18581 listings, CVE records, and CVELIST) describe a heap over-read in internalPrintf of LuPng’s miniz/lupng.c, with potential for arb...

PT-2018-14526

Name of the Vulnerable Software and Affected Versions LuPng through 2017-03-10 Description A heap-based buffer over-read issue has been discovered in the internalPrintf function within miniz/lupng.c. Recommendations For versions through 2017-03-10, at the moment, there is no information about a...

CVE-2018-18581: Out-of-bounds Read

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c...

MGASA-2018-0409 Updated libtiff packages fix security vulnerabilities

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file CVE-2016-5319. In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c CVE-2017-17942. TIFFWriteScanlin...

CVE-2018-18480

A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash...

CVE-2018-18480

A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash...

CVE-2018-18480

A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash...

CVE-2018-18455

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

Heap overflow

CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18454

CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18454

CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18455

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18454

CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18455

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18454

CVE-2018-18454 is a vulnerability in Xpdf/Poppler where CCITTFaxStream::readRow() in Stream.cc (Xpdf 4.00) can crash or exhaust memory via a crafted PDF, enabling a heap-based buffer over-read and denial of service. Connected advisories cite multiple affected builds (Xpdf 4.00, 4.01.01; Poppler 0...

CVE-2018-18455

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...

PT-2018-14469

Name of the Vulnerable Software and Affected Versions Xpdf version 4.00 Description The issue allows remote attackers to cause a denial of service via a crafted pdf file. This can be achieved by exploiting the GfxImageColorMap class in GfxState.cc. A demonstration of this exploit is possible usin...

CVE-2018-18455: Out-of-bounds Read

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...