CVE-2017-2942

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when processing TIFF image data. Successful exploitation could lead to arbitrary code execution...

Heap overflow

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

CVE-2016-5278

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

UBUNTU-CVE-2016-5278

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

CVE-2016-5278

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

Mozilla: Heap-buffer-overflow in nsBMPEncoder::AddImageFrame (MFSA 2016-85, MFSA 2016-86)

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

CVE-2016-5278

Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 allows remote attackers to execute arbitrary code via a crafted image data that is mishandled during the encoding of an image frame to an image...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the exif.c file in the jhead 2.87 tool, which is used in the libjhead library of the Android operating system, arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using specially crafted EX...

Multiple Apple products WebKit homology policy bypass vulnerability (CNVD-2016-05666)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

CVE-2016-4583

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document...

CVE-2016-4583

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...

The vulnerability of the Thunderbird email client, which allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or trigger service failures by using specially crafted image data...

The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or perform a denial-of-service attack

The Mozilla Firefox browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...

The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or trigger a service denial

The Mozilla Firefox browser contains a vulnerability related to errors occurring when memory is used after it is freed in the imgRequestProxy function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, using values of the content types from the image data...

The vulnerability of the Mozilla SeaMonkey software package allows a malicious individual to execute arbitrary code or perform denial-of-service attacks.

Mozilla SeaMonkey software contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals operating remotely to execute arbitrary code or trigger service failures by using specially crafted image data...

imlib2 integer overflow vulnerability (CNVD-2016-02331)

imlib2 is a general-purpose graphics loading and rendering library. imlib2 fails to properly allocate memory for image data, allowing a local attacker to exploit this vulnerability in an integer overflow attack that could crash an application...

CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

Design/Logic Flaw

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

CVE-2016-0757

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...