8 matches found
CVE-2023-46865
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image...
[ MDVSA-2015:090 ] libpng
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:090 http://www.mandriva.com/en/support/security/ Package : libpng Date : March 28, 2015 Affected: Business Server 2.0 Problem Description: Updated libpng package fixes security vulnerabilities: The...
libpng 1.6.15 Heap Overflow Exploit
Exploit for linux platform in category local exploits / Alex Eubanks email protected libpng 1.6.15 heap overflow 18 December 2014 / / A foreword / // this bug was found with american fuzzy lop! thanks lcamtuf! / We will trigger a call to zlib which will decompress data from an IDAT chunk into a...
Updated libpng package fixes security vulnerability
The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero CVE-2014-0333...
CVE-2014-0333
The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...
Design/Logic Flaw
The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...
CVE-2014-0333
The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...
CVE-2014-0333
CVE-2014-0333 affects libpng 1.6.x up to 1.6.9. The PNG progressive decoder’s png_push_read_chunk in pngpread.c can enter an infinite loop and cause CPU exhaustion when it processes an IDAT chunk of length zero, enabling a denial of service via a remote attacker. The issue is tied to the png_push...