1120 matches found
Memory Corruption Vulnerability in ICO Image Processing by Universal Viewer
Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with ICO format images, which allows an attacker to construct a malformed ICO format that can cause the program to crash, and if successfully exploited, can lead to...
DEBIAN-CVE-2017-6498
An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS...
UBUNTU-CVE-2016-10061
The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service crash via a crafted image file...
DEBIAN-CVE-2016-9830
The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service crash via large dimensions in a jpeg image...
DEBIAN-CVE-2015-8903
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a crafted VICAR file...
ALPINE-CVE-2016-5321
The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and crash via a crafted tiff image...
CVE-2017-2942
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability when processing TIFF image data. Successful exploitation could lead to arbitrary code execution...
[SECURITY] Fedora 24 Update: libpng10-1.0.67-1.fc24
The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...
[SECURITY] Fedora 25 Update: libpng10-1.0.67-1.fc25
The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...
UBUNTU-CVE-2016-5652
An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means...
[SECURITY] Fedora 25 Update: libpng-1.6.27-1.fc25
The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...
UBUNTU-CVE-2016-6906
The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...
PT-2016-4580 · X.Org Foundation +5 · Libxpm +5
Name of the Vulnerable Software and Affected Versions: libXpm versions prior to 3.5.12 Description: The issue is related to multiple integer overflows that occur when a program requests parsing XPM extensions on a 64-bit platform. This can be triggered by a crafted XPM file, specifically through...
UBUNTU-CVE-2016-8707
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered...
openSUSE Security Update : GraphicsMagick (openSUSE-2016-1415)
This update for GraphicsMagick fixes the following security issues : - CVE-2016-9556: Maliciously crafted image headers could cause denial of service in image format detection routines boo1011130 - CVE-2016-9559: Maliciously crafted image headers could cause denial of service in image format...
openSUSE Security Update : GraphicsMagick (openSUSE-2016-1414)
This update for GraphicsMagick fixes the following security issues : - CVE-2016-9556: Maliciously crafted image headers could cause denial of service in image format detection routines boo1011130 - CVE-2016-9559: Maliciously crafted image headers could cause denial of service in image format...
Lepton parent parameter SQL injection vulnerability
Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton parent parameter, which could allow an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlying database...
Lepton Open Redirect Vulnerability
Lepton is a set of tools for lossless compression of JPEG format files. Lepton suffers from an open redirection vulnerability that can be exploited by an attacker to redirect a user to an arbitrary website to conduct a phishing attack...
[SECURITY] Fedora 24 Update: libwebp-0.5.1-2.fc24
WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently...
