Chengdu Hengtu Technology Co., Ltd.'s Good Photo Image Processing Software Has a Denial of Service Vulnerability

Good Photo is a multi-platform professional-grade image processing software developed by Chengdu Hengtu Technology Co. A denial-of-service vulnerability exists in Chengdu Hengtu Technology Co., Ltd.'s Good Photo image processing software when initializing the image header, which is due to the...

ActivePDF toolkit Pictview image processing library code execution vulnerability

ActivePDF Toolkit is a set of scalable programmable to help users create and manage pdf files COM tools. Pictview image processing library is one of the image processing library. ActivePDF toolkit Pictview image processing library in a security vulnerability. Remote attackers can exploit the...

Cimg Denial of Service Vulnerability

CImg is an open source C++ tool library for image processing . A security vulnerability exists in the loadbmp file of the CImg.h file in CImg version 220. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted bmp image...

Simple DirectMedia Layer SDL2_Image LWZ Decompression Buffer Overflow Vulnerability

Summary A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability. Tested Versions Simple DirectMedia Layer...

Out-of-bounds

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images...

CVE-2018-7264

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images...

CVE-2018-7264

The CVE-2018-7264 entry concerns the ActivePDF Toolkit’s embedded Pictview image processing library. The vulnerability description in the documents states multiple out-of-bounds write and sign errors allowing a remote attacker to execute arbitrary code when processing untrusted images, affecting ...

CVE-2018-7264: Out-of-bounds Write

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images...

ActivePDF Toolkit < 8.1.0.19023 - Multiple Memory Corruptions Exploit

Exploit for windows platform in category dos / poc ActivePDF Toolkit 8.1.0 multiple RCE Introduction ============ The ActivePDF Toolkit is a Windows library which enhances business processes to stamp, stitch, merge, form-fill, add digital signatures, barcodes to PDF. Both .NET and native APIs are...

CVE-2018-4909

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

CVE-2018-4879

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image...

Leptonica Bypasses File Restriction Vulnerability

Leptonica is an open source system for image processing and image analysis applications. A security vulnerability exists in Leptonica version 1.74.4. A local attacker can exploit the vulnerability to bypass file restrictions...

ActivePDF Toolkit Code Execution

ActivePDF Toolkit 8.1.0 multiple RCE Introduction ============ The ActivePDF Toolkit is a Windows library which enhances business processes to stamp, stitch, merge, form-fill, add digital signatures, barcodes to PDF. Both .NET and native APIs are provided. Amongst many other operations, this...

Leptonica 'gplotMakeOutput' Function Command Injection Vulnerability

Leptonica is an open source system for image processing and image analysis applications. A security vulnerability exists in the 'gplotMakeOutput' function in Leptonica 1.75.3 and earlier versions. An attacker can exploit the vulnerability to inject commands...

[SECURITY] Fedora 27 Update: GraphicsMagick-1.3.28-1.fc27

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

[SECURITY] Fedora 26 Update: GraphicsMagick-1.3.28-1.fc26

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

[SECURITY] [DLA 1260-1] tiff3 security update

Package : tiff3 Version : 3.9.6-11+deb7u9 CVE ID : CVE-2017-18013 Debian Bug : 885985 A vulnerability has been discovered in the libtiff image processing library which may result in an application crash and denial of service. CVE-2017-18013 NULL pointer dereference via crafted TIFF image For Debi...

[SECURITY] [DLA 1259-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u18 CVE ID : CVE-2017-18013 Debian Bug : 885985 A vulnerability has been discovered in the libtiff image processing library which may result in an application crash and denial of service. CVE-2017-18013 NULL pointer dereference via crafted TIFF image For Debia...

[SECURITY] [DLA 1245-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u17 CVE ID : CVE-2018-5685 Debian Bug : 887158 A vulnerability has been discovered in GraphicsMagick, a collection of image processing tools, which may result in a denial of service. CVE-2018-5685: An infinite loop and application hang has been...

ImageMagick 'EncodeImageAttributes' function memory leak vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'EncodeImageAttributes' function of the coders/json.c file in ImageMagick...