CVE-2019-5092

An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution...

Heap overflow

An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution...

CVE-2019-5092

CVE-2019-5092 affects LEADTOOLS 20.0.2019.3.15: a heap out-of-bounds write in the UI tag parsing of DICOM handling (ltdicx.dll) can occur when processing the UI tag data, leading to potential code execution. The TALOS advisory details a vulnerability chain in LEADTOOLS components, with a concrete...

CVE-2019-5092

An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A specially crafted DICOM image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution...

EulerOS 2.0 SP2 : libtiff (EulerOS-SA-2019-2466)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used fi...

[SECURITY] Fedora 31 Update: libtiff-4.0.10-7.fc31

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

Buffer Overflow Vulnerability in XnConvert

XnConvert is a cross-platform image format conversion tool that supports batch conversion, allowing you to convert image formats, scale images, add filter effects, watermarks and more. XnConvert suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of...

The vulnerability of the DescribeImage function (magick/describe.c) in the cross-platform library for working with graphics in GraphicsMagick allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the DescribeImage function in the cross-platform graphics library GraphicsMagick is related to a buffer overflow error. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

LEAD Technologies LEADTOOLS Numeric Error Vulnerability

LEAD Technologies LEADTOOLS is an image processing development kit from LEAD Technologies. A numeric error vulnerability exists in the CMP parsing function in LEAD Technologies LEADTOOLS. The vulnerability can be exploited to execute code via specially crafted CMP image files...

LEAD Technologies LEADTOOLS Buffer Overflow Vulnerability

LEAD Technologies LEADTOOLS is an image processing development kit from LEAD Technologies. A buffer overflow vulnerability exists in the TIF parsing function in LEAD Technologies LEADTOOLS. The vulnerability can be exploited to execute code via specially crafted TIF images...

LEAD Technologies LEADTOOLS Heap Overflow Vulnerability

LEAD Technologies LEADTOOLS is an image processing development kit from LEAD Technologies. A buffer error vulnerability exists in the JPEG2000 parsing functionality in LEAD Technologies LEADTOOLS. The vulnerability originates when a networked system or product performs an operation on memory...

evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

LEADTOOLS CMP-parsing code execution vulnerability

Summary An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20. A specially crafted CMP image file can cause an integer underflow, potentially resulting in code execution. An attacker can specially craft a CMP image to trigger this vulnerability...

USN-4158-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

IrfanView User Mode Write Access Conflict Vulnerability (CNVD-2019-36937)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.53 suffers from a user-mode write access conflict vulnerability. An attacker can exploit this vulnerability to read...

USN-4148-1: OpenEXR vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2017-12596...

Memory corruption vulnerability in XnView wic files

XnView is an image viewer. A memory corruption vulnerability exists in XnView's handling of wic files, where an attacker can trick a user who has installed XnView into opening a malicious wic file, which in turn triggers the vulnerability and executes malicious code on the user's system or causes...

Chamilo LMS 1.11.8 Shell Upload Exploit

Exploit for php platform in category web applications PHP Test FILE UPLOAD'; $tgtdir = "uploads/"; $tgtfile = $tgtdir.basename$FILES'fileToUpload''name'; echo "TARGET FILE= ".$tgtfile; //$filename = $FILES'fileToUpload''name'; echo "FILE NAME FROM VARIABLE:- ".$FILES"fileToUpload""name...

Memory Corruption Vulnerability in WPS Image Processing ico

WPS Photo software is a practical tool from the official hand of WPS to see the picture, WPS Photo software is powerful, to help users browse a variety of image formats, the software is simple to operate, you can easily open a variety of types of pictures. WPS image processing ico memory corrupti...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...