CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

Integer overflow

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-5200

CVE-2018-5200 relates to KMPlayer 4.2.2.15 and earlier, where a Heap Based Buffer Overflow occurs when processing crafted FLV data. The issue arises because more frame data is copied to heap memory than the size specified in the frame header, causing memory corruption and potential remote code ex...

CVE-2018-5200 KMPlayer Heap Overflow Vulnerability

KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:4191-1)

This update for tiff fixes the following issues : Security issues fixed : CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. CVE-2016-10094: Fixed heap-bas...

CVE-2018-20230

CVE-2018-20230 affects PSPP 1.2.0 due to a heap-based buffer overflow in read_bytes_internal (utilities/pspp-dump-sav.c). Impact per the entry: denial of service via application crash and possible unspecified other effects. The connected records also reference CVE-2022-39831 affecting PSPP 1.6.2 ...

CVE-2018-20230

An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

CVE-2018-20184

GraphicsMagick 1.4 snapshot-20181209 Q8 contains a heap-based buffer overflow in the WriteTGAImage function (tga.c) when processing TGA files. The overflow arises because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA spec, enabling a crafted image to trigger...

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

Security Bulletin: Vulnerabilities in curl affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in curl. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000301 DESCRIPTION: curl is vulnerable to a denial of service, caused by heap-based buffer over-read. By sending a specially crafted RTSP response, a remote...

SUSE SLES11 Security Update : tiff (SUSE-SU-2018:4120-1)

This update for tiff fixes the following issues : Security issues fixed : CVE-2016-10094: Fixed heap-based buffer overflow in the tiffWriteProc function bsc1017693. CVE-2016-10093: Fixed heap-based buffer overflow in the TIFFmemcpy function bsc1017693. CVE-2016-10092: Fixed heap-based buffer...

CVE-2018-19540

An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0....

openSUSE Security Update : tiff (openSUSE-2018-1522)

This update for tiff fixes the following issues : Security issues fixed : - CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. - CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. - CVE-2016-10094: Fixed...