Computerinsel Photoline TIFF Parsing Function Memory Corruption Vulnerability

PhotoLine is a multipurpose image and graphics editor. A memory corruption vulnerability exists in the TIFF parsing feature in Computerinsel Photoline 20.53. An attacker can exploit this vulnerability to cause out-of-bounds writes and overwrite arbitrary data via specially crafted TIFF images,...

PT-2018-16280 · Computerinsel · Photoline

Name of the Vulnerable Software and Affected Versions: Computerinsel Photoline version 20.53 Description: A memory corruption issue exists in the PCX-parsing functionality. Processing a specially crafted PCX image can lead to an out-of-bounds write, allowing an attacker to overwrite arbitrary dat...

[SECURITY] [DLA 1340-1] sam2p security update

Package : sam2p Version : 0.49.1-1+deb7u3 CVE ID : CVE-2018-7487 CVE-2018-7551 CVE-2018-7552 CVE-2018-7553 CVE-2018-7554 Multiple invalid frees and buffer-overflow vulnerabilities were discovered in sam2p, a utility to convert raster images and other image formats, that may lead to a...

[SECURITY] Fedora 28 Update: libtiff-4.0.9-7.fc28

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

Denial of Service Vulnerability in the Processing of TIF Files by DocuCom TH-OCR Free Edition

Wentong TH-OCR Free Edition is a free text recognition software from Beijing Wentong Technology Co. There is a denial-of-service vulnerability in the handling of TIF files by Wentong TH-OCR Free Edition. An attacker can cause the program to crash by constructing a malformed TIF format, which, if...

DEBIAN-CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

CVE-2018-4916

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image...

UBUNTU-CVE-2018-5360

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

The vulnerability of the TIFFWriteDirectoryTagCheckedLong8Array function in the tiff library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the TIFFWriteDirectoryTagCheckedLong8Array function in the tiff library exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

UBUNTU-CVE-2017-18005

Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file...

The vulnerability in the software for converting images on the Debian GNU/Linux operating system arises from overflowing buffers in dynamic memory, allowing an attacker to cause the application to terminate abnormally.

The vulnerability of the software for converting image formats in the Debian GNU/Linux operating system is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to cause the application to terminate abnormally by using a specially crafted cu...

DEBIAN-CVE-2017-17786

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c related to bgr2rgb.part.1 via an unexpected bits-per-pixel value for an RGBA image...

DEBIAN-CVE-2017-17498

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service bitstream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-16396

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the TIFF processin...

Memory Corruption Vulnerability in EximiousSoft GIF Creator v7.31 Processing ICO Images (CNVD-2017-36513)

EximiousSoft GIF Creator is an animated GIF creator. EximiousSoft GIF Creator suffers from a memory corruption vulnerability when handling the ICO format. An attacker can cause the program to crash by constructing malformed ICO images...

Multiple Memory Corruption Vulnerabilities in STDU Viewer's Handling of TIFFs

STDU Viewer is an electronic document reader that supports TIF, PDF, djvu formats. STDU Viewer suffers from multiple memory corruption vulnerabilities when handling TIFF images, which could allow an attacker to cause a program crash or arbitrary code execution by constructing malformed TIFF forma...

Multiple Memory Corruption Vulnerabilities in STDU Converter's Handling of TIFFs

STDU Converter is a document format conversion tool. STDU Converter suffers from multiple memory corruption vulnerabilities when processing TIFF images, which can be exploited by attackers to cause a program crash by constructing malformed TIFF-formatted images, or successfully exploited to cause...

PT-2017-15596 · Sdl +1 · Sdl Image +1

Name of the Vulnerable Software and Affected Versions: SDL image version 2.0.1 Description: A buffer overflow vulnerability exists in the XCF property handling functionality. A specially crafted XCF file can cause a stack-based buffer overflow, potentially leading to code execution. An attacker c...

UBUNTU-CVE-2017-15217

ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c...

[SECURITY] Fedora 27 Update: rawtherapee-5.2-2.fc27

Rawtherapee is a RAW image processing software. It gives full control over many parameters to enhance the raw picture before finally exporting it to some common image format...