2675 matches found
CVE-2017-11226: Improper Restriction of Operations within the Bounds of a Memory Buffer
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 JP2 code stream data. Successful exploitation could lead to...
Wolf in sheep's clothing: how to use the Windows icon to display the vulnerability disguise a PE file-vulnerability warning-the black bar safety net
One, Foreword Windows System icon to display the function in the presence of a vulnerability, exploit this vulnerability, the attacker may be from the local host to automatically “borrow“ other commonly used icons, use these icon camouflage PE file, thereby tempting the user to click on such a...
PT-2017-11831
Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 2017.009.20058 and earlier Adobe Acrobat Reader versions 2017.008.30051 and earlier Adobe Acrobat Reader versions 2015.006.30306 and earlier Adobe Acrobat Reader version 11.0.20 and earlier Description The issue i...
ImageMagick Denial of Service Vulnerability (CNVD-2017-21004)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'DestroyImage' function of the MagickCore/image.c file in ImageMagick...
CVE-2017-12606
OpenCV (Open Source Computer Vision Library) up to version 3.3 is affected by CVE-2017-12606 due to an out-of-bounds write in FillColorRow4 in utils.cpp when reading an image with cv::imread. The described impact is memory corruption, with exploitation status not provided in the supplied document...
CVE-2017-12604
OpenCV CVE-2017-12604 affects OpenCV up to version 3.3, where an out-of-bounds write occurs in FillUniColor (utils.cpp) when reading an image via cv::imread. The vulnerability is tied to memory write behavior and is documented across multiple advisories; Debian LTS notes patches in 2.4.9.1+dfsg1-...
CVE-2017-12605
OpenCV Open Source Computer Vision Library (up to 3.3) contains an out-of-bounds write in FillColorRow8 (utils.cpp) when reading images via cv::imread, as identified in CVE-2017-12605. Connected sources confirm the affected component and function, and multiple advisories surface the risk across d...
CVE-2017-12597
OpenCV Open Source Computer Vision Library (
USN-3363-2: ImageMagick regression
USN-3363-1 fixed vulnerabilities in ImageMagick. The update caused a regression for certain users when processing images. The problematic patch has been reverted pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick...
GraphicsMagick buffer overflow vulnerability (CNVD-2017-19974)
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'WriteCMYKImage' function in the coders/cmyk.c file in GraphicsMagick version 1.3.26. An attacker can exploit...
Memory corruption
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage function in coders/mat.c...
Code injection
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...
CVE-2017-11640
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...
[SECURITY] Fedora 25 Update: GraphicsMagick-1.3.26-3.fc25
GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...
[SECURITY] Fedora 24 Update: GraphicsMagick-1.3.26-3.fc24
GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...
ImageMagick 'coders/histogram.c' Denial of Service Vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WriteHISTOGRAMImage' function in the coders/histogram.c file in...
[SECURITY] Fedora 26 Update: GraphicsMagick-1.3.26-3.fc26
GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...
CVE-2017-11537
When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception FPE in the WritePALMImage function in coders/palm.c, related to an incorrect bits-per-pixel calculation...
