Siemens Syngo FastView 安全漏洞

Siemens Syngo FastView is a standalone viewer of Dicom 2 images provided on a Dicom exchange media from Siemens Germany. A security vulnerability exists in Siemens Syngo FastView that arises from the affected application's lack of proper validation of user-supplied data parsing a DICOM file, whic...

Mageia: Security Advisory (MGASA-2021-0249)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-5338 · Corel · Coreldraw Graphics Suite

Name of the Vulnerable Software and Affected Versions: Corel CorelDRAW Graphics Suite version 23.5.0.506 Description: The issue is related to a buffer overflow in the parsing of PCX files, which can be exploited by remote attackers to execute arbitrary code on affected installations. User...

PT-2022-5414 · Corel · Coreldraw Graphics Suite

Name of the Vulnerable Software and Affected Versions: Corel CorelDRAW Graphics Suite version 23.5.0.506 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2021-2850)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44859

An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TGA files. An unchecked input data from a crafted TGA file leads to an out-of-bounds read. An attacker can leverage this vulnerability...

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

...

CVE-2021-44007

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The TiffLoader.dll contains an off-by-one error in the heap while parsing specially crafted TIFF files. This could allow an attacker to cause a denial-of-service condition...

PT-2021-5662 · Adobe · Lightroom

Name of the Vulnerable Software and Affected Versions: Adobe Lightroom versions 4.4 and earlier Description: The issue is related to a use-after-free vulnerability in the processing of parsing TIF files, which could result in privilege escalation. Exploitation of this issue requires user...

[SECURITY] Fedora 35 Update: golang-github-opencontainers-image-spec-1.0.2-1.fc35

The OCI Image Format project creates and maintains the software shipping container image format spec OCI Image Format...

[SECURITY] Fedora 34 Update: golang-github-opencontainers-image-spec-1.0.2-1.fc34

The OCI Image Format project creates and maintains the software shipping container image format spec OCI Image Format...

Fedora: Security Advisory for golang-github-opencontainers-image-spec (FEDORA-2021-6789ed60f2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete and should only be used for development and testing purposes.

...

OX App Suite / Ox Documents 7.10.x XSS / Code Injection / Traversal Vulnerability

OX App Suite and OX Documents suffer from cross site scripting, code injection, path traversal, and input validation vulnerabilities. Most of these issues affect 7.10.5 and below with one affecting 7.10.4 and below. Product: OX App Suite, OX Documents Vendor: OX Software GmbH Internal reference:...

USN-5150-1: OpenEXR vulnerability

It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash...

USN-5144-1: OpenEXR vulnerability

It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

EulerOS 2.0 SP9 : gd (EulerOS-SA-2021-2683)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service out-of-bounds read v...

EulerOS 2.0 SP9 : gd (EulerOS-SA-2021-2708)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service out-of-bounds read v...

WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor. A buffer overflow vulnerability exists in Editor!TMethodImplementationIntercept+0x3c3682 in WildBit Viewer version 6.6, which can be exploited by an attacker to cause a denial of service via a specially crafted tiff file...

Nomacs 安全漏洞

Nomacs is a free open source image viewer for viewing all common image formats, including Raw and Psd images. It is used to view all common image formats, including Raw and Psd images. Nomacs v3.15.0 contains a security vulnerability that could be exploited by an attacker to cause a denial of...