OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)

It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...

OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)

It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data 9847.prm...

Multiple Apple Products ImageIO Component Memory Leak Vulnerability

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system. imageIO is one of the static methods used to perform common image I/O operations. A security vulnerability exists in the ImageIO component ...

Mac OS X 10.x < 10.12.2 Multiple Vulnerabilities

Binary data 9840.prm...

macOS 10.12.x < 10.12.2 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppleGraphicsPowerManagement - Assets - Audio - Bluetooth - CoreCapture - CoreFoundation - CoreGraphics - CoreMedia...

Apple iOS < 10.2 Multiple Vulnerabilities

Binary data appleios102check.nbin...

Apple macOS Sierra ImageIO Arbitrary Code Execution Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers. imageIO is one of the static methods used to perform common image I/O operations. An arbitrary code execution vulnerability exists in ImageIO in Apple macOS Sierra versions prior to 10.12.1. A remote attack...

Mac OS X 10.x < 10.12.1 Multiple Vulnerabilities

Binary data 9758.prm...

Apple macOS Sierra ImageIO Over-the-Border Write Vulnerability

Apple macOS Sierra is a specialized operating system developed for Mac computers. An out-of-bounds write vulnerability exists in ImageIO in Apple macOS Sierra, which allows local attackers to exploit the vulnerability to build malicious PDFs that can be tricked into parsing by an application,...

Apple macOS Sierra ImageIO Cross-Border Read Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers. imageIO is one of the static methods used to perform common image I/O operations. An out-of-bounds read vulnerability exists in the SGI image parsing in Apple macOS Sierra ImageIO. An attacker can exploit...

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to trigger service interruptions

The vulnerability of the ImageIO component in operating systems such as Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to trigger a service failure memory consumption by using undefined vectors...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ImageIO component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted EXR image with B44...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ImageIO service in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption by using the specially crafted xStride and yStride values in the E...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the ImageIO component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially created TIFF file...

Security update for java-1_8_0-openjdk (important)

This update for java-180-openjdk fixes the following issues: - Upgrade to version jdk8u101 icedtea 3.1.0 - New in release 3.1.0 2016-07-25: Security fixes - S8079718, CVE-2016-3458: IIOP Input Stream Hooking bsc989732 - S8145446, CVE-2016-3485: Perfect pipe placement Windows only bsc989734 -...

Apple iOS Denial of Service Vulnerability (CNVD-2016-05762)

Apple iOS is an operating system developed for mobile devices; OS X is a specialized operating system developed for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A security vulnerability in ImageIO in several Apple products allows remote...

Apple OS X ImageIO memory corruption vulnerability (CNVD-2016-05768)

Apple OS X is a specialized operating system developed for Mac computers. A security vulnerability exists in ImageIO in Apple OS X, which can be exploited by remote attackers to execute arbitrary code or conduct denial-of-service attacks using B44 compressed EXR images...

CVE-2016-4632

ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...