NewStart CGSL CORE 5.05 / MAIN 5.05 : exempi Multiple Vulnerabilities (NS-SA-2019-0228)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has exempi packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service invalid memcpy with resultant use-after-free...

CVE-2018-14851

exifprocessIFDinMAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG file...

PT-2019-15988 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg through 2019-08-21 Description: The issue is related to a divide-by-zero error in the jfif decode function, located in jfif.c. This error occurs in ffjpeg. Recommendations: For ffjpeg through 2019-08-21, consider updating to a version...

The vulnerability of the cross-platform library for working with GraphicsMagick, related to uncontrolled resource consumption during processing of exceptional states, allows a hacker to cause a service failure.

The vulnerability of the cross-platform library for working with GraphicsMagick is related to an uncontrolled resource consumption during the processing of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure resource consumption by using a...

Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1

Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This article describes a platform update for Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1. This update improves the range and performance of the following graphics and imaging components: Direct2D DirectWrite...

PT-2022-8727 · Jhead +3 · Jhead +3

Name of the Vulnerable Software and Affected Versions: JHEAD versions 3.04 and earlier Description: The issue is related to a heap-buffer-overflow in the ReadJpegSections function, located at jpgfile.c:285. This can be triggered by crafted jpeg images, potentially causing a program crash or...

Verot 2.0.3 - Remote Code Execution Exploit #RCE

Exploit for php platform in category web applications Exploit Title: Verot 2.0.3 - Remote Code Execution Date: 2019-12-05 Exploit Author: Jinny Ramsmark Vendor Homepage: https://www.verot.net/phpclassupload.htm Software Link: https://github.com/verot/class.upload.php Version: '; $quality = "85";...

Verot 2.0.3 Remote Code Execution

Exploit Title: Verot 2.0.3 - Remote Code Execution Date: 2019-12-05 Exploit Author: Jinny Ramsmark Vendor Homepage: https://www.verot.net/phpclassupload.htm Software Link: https://github.com/verot/class.upload.php Version: '; $quality = "85"; $baseurl = "http://lorempixel.com"; echo "-=Imagejpeg...

Verot 2.0.3 - Remote Code Execution

Exploit Title: Verot 2.0.3 - Remote Code Execution Date: 2019-12-05 Exploit Author: Jinny Ramsmark Vendor Homepage: https://www.verot.net/phpclassupload.htm Software Link: https://github.com/verot/class.upload.php Version: '; $quality = "85"; $baseurl = "http://lorempixel.com"; echo "-=Imagejpeg...

[SECURITY] Fedora 30 Update: ImageMagick-6.9.10.75-1.fc30

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

PT-2019-6390 · Libjpeg Turbo +9 · Libjpeg-Turbo +9

Name of the Vulnerable Software and Affected Versions: Libjpeg-turbo versions affected versions not specified Description: The issue is related to a stack-based buffer overflow in the transform component of Libjpeg-turbo. A remote attacker can exploit this by sending a malformed jpeg file,...

[SECURITY] Fedora 30 Update: jhead-3.04-1.fc30

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

[SECURITY] Fedora 31 Update: jhead-3.04-1.fc31

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

[SECURITY] Fedora 31 Update: ImageMagick-6.9.10.75-1.fc31

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Fedora Update for freeimage FEDORA-2019-76f546b7b8

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: freeimage-3.18.0-6.fc31

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

[SECURITY] Fedora 30 Update: freeimage-3.18.0-6.fc30

FreeImage is a library for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today's multimedia applications...

CVE-2019-18958

Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed...

[SECURITY] Fedora 31 Update: libjpeg-turbo-2.0.2-5.fc31

The libjpeg-turbo package contains a library of functions for manipulating JPEG images...

[SECURITY] Fedora 31 Update: gd-2.2.5-10.fc31

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...