[SECURITY] Fedora 22 Update: libtiff-4.0.3-20.fc22

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

SUSE SLED11 / SLES11 Security Update : libqt4 (SUSE-SU-2015:0977-1)

The libqt4 library was updated to fix several security issues : CVE-2015-0295: Division by zero when processing malformed BMP files. bsc921999 CVE-2015-1858: Segmentation fault in BMP Qt Image Format Handling. bsc927806 CVE-2015-1859: Segmentation fault in ICO Qt Image Format Handling. bsc927807...

[SECURITY] Fedora 21 Update: libtiff-4.0.3-20.fc21

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

[SECURITY] [DLA 221-1] tiff security update

Package : tiff Version : 3.9.4-5+squeeze12 CVE ID : CVE-2014-8128 CVE-2014-8129 CVE-2014-9330 CVE-2014-9655 Debian Bug : 773987 Several vulnerabilities have been discovered in the LibTIFF library and utilities for the Tag Image File Format. These could lead to a denial of service, information...

DEBIAN-CVE-2015-1859

Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service segmentation fault and crash and possibly execute arbitrary code via a crafted ICO image...

SUSE-SU-2015:0977-1 Security update for libqt4

The libqt4 library was updated to fix several security issues: CVE-2015-0295: Division by zero when processing malformed BMP files. bsc921999 CVE-2015-1858: Segmentation fault in BMP Qt Image Format Handling. bsc927806 CVE-2015-1859: Segmentation fault in ICO Qt Image Format Handling. bsc927807...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the accessibility of protected information.

The vulnerability of the jpeg package up to version 6b-r7 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Fedora 20 : qt5-qtbase-5.4.1-9.fc20 (2015-6315)

Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also...

Fedora 21 : qt5-qtbase-5.4.1-9.fc21 (2015-6364)

Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also...

Fedora 22 : qt5-qtbase-5.4.1-9.fc22 (2015-6114)

Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also...

FreeBSD : qt4-imageformats, qt4-gui, qt5-gui -- Multiple Vulnerabilities in Qt Image Format Handling (5713bfda-e27d-11e4-b2ce-5453ed2e2b49)

Richard J. Moore reports : Due to two recent vulnerabilities identified in the built-in image format handling code, it was decided that this area required further testing to determine if further issues remained. Fuzzing using afl-fuzz located a number of issues in the handling of BMP, ICO and GIF...

Microsoft Windows Graphics Component Remote Code Execution Vulnerability (3046306)

This host is missing a critical security update according to Microsoft Bulletin MS15-035. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

qt4-imageformats, qt4-gui, qt5-gui -- Multiple Vulnerabilities in Qt Image Format Handling

Richard J. Moore reports: Due to two recent vulnerabilities identified in the built-in image format handling code, it was decided that this area required further testing to determine if further issues remained. Fuzzing using afl-fuzz located a number of issues in the handling of BMP, ICO and GIF...

PHP GD GetCode_Denial of Service Vulnerability

PHP is a popular programming language. The GetCode function in gdgifin.c in PHP GD fails to properly handle GIF images, allowing remote attackers to exploit the vulnerability to construct malicious files that can be parsed by the user, which can be used in denial of service or arbitrary code...

[SECURITY] Fedora 21 Update: libpng10-1.0.63-1.fc21

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

[SECURITY] Fedora 20 Update: libpng10-1.0.63-1.fc20

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

[SECURITY] Fedora 22 Update: libpng10-1.0.63-1.fc22

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

Microsoft Graphics Component Information Disclosure Vulnerability (3029944)

This host is missing an important security update according to Microsoft Bulletin MS15-016. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-016: Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3029944)

The version of Microsoft's Graphics Component installed on the remote host is affected by an information disclosure vulnerability due to improperly handled uninitialized memory when parsing specially crafted TIFF image format files. A remote attacker can exploit this vulnerability by convincing a...

Oracle Solaris Third-Party Patch Update : gimp (multiple_vulnerabilities_in_gimp)

The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file,...