6661 matches found
Arbitrary Code Execution
Mozilla Firefox is an open source web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2014-1518,...
Denial Of Service (DoS) Or Remote Code Execution (RCE)
The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...
Memory Corruption
The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...
USN-3953-2 php5 vulnerabilities
USN-3953-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could use this issue to cause PHP...
Denial Of Service (DoS)
libjasper.so is vulnerable to denial of service. A NULL pointer dereference in JP2 encoder allows an attacker to crash the process via a malicious JPEG 2000 image...
CVE-2019-9136
DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...
The vulnerability of the opj_j2k_setup_encoder function in the OpenJPEG image encoding and decoding library, related to integer overflow caused by left shift operations, allows attackers to cause service failures.
The vulnerability of the opjj2ksetupencoder function in the OpenJPEG image encoding and decoding library is related to a numerical overflow caused by a left shift operation. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...
Ubuntu: Security Advisory (USN-3953-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-3953-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3953-1 advisory. It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could use this issue to cause PHP to crash...
USN-3953-1 php7.0, php7.2 vulnerabilities
It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-3953-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code...
Security Bulletin: A security vulnerability has been identified in IBM Java Runtime could affect DB2 Query Management Facility (CVE-2018-12547, CVE-2019-2426, CVE-2018-1890, CVE-2018-12549, CVE-2018-11212)
Summary An unspecified vulnerability has been identified in IBM Java Runtime that could affect Db2 Query Management Facility. Vulnerability Details CVEID: CVE-2018-12547 CVSS Base Score: 9.8 DESCRIPTION: A widely used function in the OpenJ9 JVM is vulnerable to buffer overlows. Multiple Java...
Denial Of Service (DoS)
canvas is vulnerable to denial of service DoS attacks. The vulnerability exists as it improperly handles JPEG and GIF files, causing a crash when handling large files...
The vulnerability of the exif_process_IFD_in_MAKERNOTE module in the PHP programming language, related to reading beyond buffer boundaries, allows attackers to cause service failures.
The vulnerability of the exifprocessIFDinMAKERNOTE module located in ext/exif/exif.c in the PHP programming language is related to incorrect image processing. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created JPEG file...
Fedora Update for libjpeg-turbo FEDORA-2019-87e2fa8e0f
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
EulerOS 2.0 SP2 : libexif (EulerOS-SA-2019-1116)
According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows...
Debian DLA-1740-1 : libav security update
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c did not validate the number of components in a JPEG-LS Start Of Frame segment, which allowed remote attackers to caus...
CVE-2019-10276
Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type...
[SECURITY] Fedora 28 Update: libjpeg-turbo-1.5.3-7.fc28
The libjpeg-turbo package contains a library of functions for manipulating JPEG images...
openSUSE Security Update : GraphicsMagick (openSUSE-2019-397)
GraphicsMagick was updated to 1.3.29 : - Security Fixes : - GraphicsMagick is now participating in Google's oss-fuzz project - JNG: Require that the embedded JPEG image have the same dimensions as the JNG image as provided by JHDR. Avoids a heap write overflow. - MNG: Arbitrarily limit the number...