36 matches found
Fedora 26 : php-horde-Horde-Image (2017-4655504984)
HordeImage 2.5.1 - mjr SECURITY: Fix more potential places for command injections. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible withou...
Fedora 25 : php-horde-Horde-Image (2017-7b4da5faba)
HordeImage 2.5.1 - mjr SECURITY: Fix more potential places for command injections. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible withou...
[SECURITY] Fedora 26 Update: php-horde-Horde-Image-2.5.2-1.fc26
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
Horde_Image Remote Code Execution Vulnerability
HordeImage is an image editing package from Horde USA, which can provide color highlighting, image effect editing and other functions. A remote code execution vulnerability exists in HordeImage versions 2.0.0 through 2.5.1. A remote attacker could exploit this vulnerability to execute code...
DEBIAN-CVE-2017-14650
A Remote Code Execution vulnerability has been found in the HordeImage library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applicatio...
Fedora Update for php-horde-Horde-Image FEDORA-2017-28387b61fd
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : php-horde-Horde-Image (2017-28387b61fd)
HordeImage 2.5.1 - mjr SECURITY: Fix more potential places for command injections. ---- HordeImage 2.5.0 - mjr SECURITY: Prevent DOS attack by preventing an infinite loop in certain conditions CVE-2017-9773, reported by Fariskhi Vidyan. - mjr SECURITY: Prevent RCE attacks by properly sanitizing...
Fedora Update for php-horde-Horde-Image FEDORA-2017-299525e757
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 24 : php-horde-Horde-Image (2017-299525e757)
HordeImage 2.5.1 - mjr SECURITY: Fix more potential places for command injections. ---- HordeImage 2.5.0 - mjr SECURITY: Prevent DOS attack by preventing an infinite loop in certain conditions CVE-2017-9773, reported by Fariskhi Vidyan. - mjr SECURITY: Prevent RCE attacks by properly sanitizing...
Fedora Update for php-horde-Horde-Image FEDORA-2017-6f7d6fbccc
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Horde_Image Denial of Service Vulnerability
HordeImage is an image editing package from Horde USA, which can provide color highlighting, image effect editing and other functions. A denial of service vulnerability exists in version 2.x of HordeImage prior to 2.5.0. An attacker can exploit this vulnerability to cause a denial of service with...
Horde_Image Remote Code Execution Vulnerability
HordeImage is an image editing package from Horde USA, which can provide color highlighting, image effect editing and other functions. A remote code execution vulnerability exists in version 2.x of HordeImage prior to 2.5.0. A remote attacker could exploit this vulnerability by sending a speciall...
UBUNTU-CVE-2017-9774
Remote Code Execution was found in HordeImage 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication...
DEBIAN-CVE-2017-9773
Denial of Service was found in HordeImage 2.x before 2.5.0 via a crafted URL to the "Null" image driver...