597 matches found
openSUSE 15 Security Update : openexr (openSUSE-SU-2021:1198-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1198-1 advisory. - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed b...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. An attacker is able to cause a denial of service condition in the application via a malicious input file that would result in a undefined bitwise right shift...
OESA-2021-1268 OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a craft...
CVE-2021-20299
A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability...
The vulnerability of the DeepScanLineInputFile() function in software for storing images with wide dynamic range brightness in OpenEXR, related to memory usage after deallocation, allows a hacker to cause a service failure.
The vulnerability of the DeepScanLineInputFile function in software for storing images in OpenEXR format with a wide dynamic range of brightness levels is related to the use of memory areas after they are freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Advisory ROSA-SA-2021-2000
Software: xdelta 3.0.7 OS: Cobalt 7.9 CVE-ID: CVE-2014-9765 CVE-Crit: HIGH CVE-DESC: Buffer overflow in maingetappheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code through a crafted input file. CVE-STATUS: default CVE-REV: default...
Unspecified Vulnerability in Red Hat Enterprise Linux
Red Hat Enterprise Linux is a Linux operating system for business users from Red Hat. A security vulnerability exists in Red Hat Enterprise Linux. The vulnerability stems from an incorrectly formatted input file may cause a segment error due to an out-of-range array access in...
Huawei EulerOS: Security Advisory for cairo (EulerOS-SA-2021-2048)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : OpenEXR vulnerabilities (USN-4996-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4996-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a...
Ubuntu 18.04 LTS / 20.04 LTS : ImageMagick vulnerabilities (USN-4988-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4988-1 advisory. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were...
Moderate: Red Hat Security Advisory: raptor2 security and bug fix update
An update for raptor2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2020-25713
A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...
CVE-2020-25713
A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...
The vulnerability in the implementation of the read_header() function of the GNU Tar archive utility allows a hacker to trigger a service failure.
The vulnerability of the readheader function implementation in the GNU Tar archive viewer is related to the output of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created input file...
Buffer Overflow
bison:edge is vulnerable to buffer overflow. An attacker is able to send a crafted input file redefining the EOF token leading to DoS...
CVE-2021-28855
In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbufwrite function src/deark-dbuf.c...
CVE-2021-28855
In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbufwrite function src/deark-dbuf.c...
Null pointer dereference
In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbufwrite function src/deark-dbuf.c...
