FastStone Image Viewer Denial of Service Vulnerability (CNVD-2018-14268)

FastStone Image Viewer is an image viewer that supports image browsing, format conversion, editing and more. A security vulnerability exists in FastStone Image Viewer version 6.2, which originates from the FSViewer.exe program failing to properly handle malformed JPEG files. An attacker can explo...

[SECURITY] Fedora 28 Update: libtiff-4.0.9-10.fc28

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

Free Lossless Image Format Denial of Service Vulnerability (CNVD-2018-11452)

Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'TransformPaletteC::process' function in the transform/paletteC.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability to cause a denial of servic...

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

CVE-2018-12109

CVE-2018-12109 affects Free Lossless Image Format (FLIF) 0.3. The vulnerability is in the TransformPaletteC::process function within transform/palette_C.hpp, where crafted PAM image files can trigger a heap-based buffer overflow, leading to a denial of service (application crash) and possibly oth...

Little CMS Out-of-Bounds Write Vulnerability

Little CMS is a small color management engine. An out-of-bounds write vulnerability exists in the cmsPipelineCheckAndRetreiveStages function in liblcms2.a in cmslut.c in tificc in Little CMS 2.9. An attacker can exploit this vulnerability to cause an out-of-bounds write via a specially crafted TI...

Double free

An issue was discovered in Free Lossless Image Format FLIF 0.3. An attacker can trigger a long loop in imageloadpnm in image/image-pnm.cpp...

CVE-2018-11507

An issue was discovered in Free Lossless Image Format FLIF 0.3. An attacker can trigger a long loop in imageloadpnm in image/image-pnm.cpp...

CVE-2018-11507

The CVE-2018-11507 entry concerns Free Lossless Image Format (FLIF) 0.3. The vulnerability is a potential long loop in image_load_pnm (image/image-pnm.cpp) that can lead to resource exhaustion. Reported impacts from the sources include partial availability impact (CVSS v2) and high availability i...

Free Lossless Image Format (FLIF) Long Loop Vulnerability

FLIF is a lossless image format based on MANIAC compression. A long loop vulnerability exists in imageloadpnm in image/image-pnm.cpp in Free Lossless Image Format FLIF version 0.3. An attacker can exploit this vulnerability to cause resource exhaustion...

Foxit Reader Information Disclosure Vulnerability (CNVD-2018-11861)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An out-of-bounds read vulnerability exists in the U3D Texture Image Format object in Foxit Reader version 9.0.0.29935, where the program fails to properly validate user-submitted data. The vulnerability can be...

CVE-2018-10482

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10482

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10482

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10482

CVE-2018-10482 affects Foxit Reader 9.0.0.29935. The issue is an out-of-bounds read in the U3D Texture Image Format object caused by improper validation of user-supplied data, leading to possible information disclosure. Attack requires user interaction (malicious page or file); an attacker could ...

Simple DirectMedia Layer SDL2_image Heap Buffer Overflow Vulnerability

Simple DirectMedia Layer is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software, and emulators. sdl2image is a component used in it for parsing and displaying various image file formats. A heap buffer overflow vulnerability exists in th...

Free Lossless Image Format Denial of Service Vulnerability

Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'TransformPaletteC::process' function in the transform/paletteC.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability to cause a denial of servic...

Free Lossless Image Format Denial of Service Vulnerability (CNVD-2018-09372)

Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'Plane' function of the image/image.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability with a specially crafted file to cause a denial of...