CVE-2018-11704: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

CVE-2018-11703: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

CVE-2018-11701: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

Security Bulletin: SiteProtector System can be affected by several vulnerabilities in the IBM Java Runtime Environment (CVE-2013-6954, CVE-2013-6629, CVE-2014-2421, CVE-2014-0453, CVE-2014-1876, CVE-2014-4244, CVE-2014-4263) and in Tomcat (CVE-2014-0075)

Summary The IBM Security SiteProtector System product can be impacted by several vulnerabilities in the IBM SDK Java Technology Edition Version 6 and 7 as well as a vulnerability in Tomcat. Vulnerability Details Java Runtime Environment Vulnerability Details: CVE ID: CVE-2013-6954 DESCRIPTION: A...

Security Bulletin: Multiple vulnerabilities in IBM SDK for Java included with IBM Forms Viewer

Summary Multiple security vulnerabilities exist in the IBM SDK for Java that is included with several installations of the IBM Forms Viewer. Vulnerability Details The IBM Forms Viewer includes installers that bundle and use the IBM SDK for Java. This version of Java includes multiple...

Exiv2 integer overflow vulnerability (CNVD-2018-14425)

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. An integer overflow vulnerability exists in the LoaderExifJpe...

Adobe Acrobat Pro DC ImageConversion EMF JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Remote code execution

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type...

CVE-2018-12051

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type...

CVE-2018-12051: Unrestricted Upload of File with Dangerous Type

Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $FILE in /webmasterst/general.php, as demonstrated by a .php file with the image/jpeg content type...

DEBIAN-CVE-2018-11813

libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF...

libjpeg macrocycle vulnerability

libjpeg is the Independent JPEG Group IJG maintained by the Independent JPEG Group IJG, a C language library containing JPEG decoding, JPEG encoding and other JPEG functions . A security vulnerability exists in libjpeg version 9c, which stems from the failure of the rdtarga.c file to properly...

CVE-2018-11736

Pluck before 4.7.7-dev2 is affected by a remote code execution in /data/inc/images.php. An attacker can upload an image/jpeg/.htaccess file to execute arbitrary PHP code, leading to full compromise of affected hosts. The issue is mitigated by upgrading to Pluck 4.7.7-dev2 or applying the fixed re...

[SECURITY] Fedora 28 Update: jasper-2.0.14-5.fc28

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 27 Update: jasper-2.0.14-5.fc27

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-518)

GraphicsMagick was updated to 1.3.29 : - Security Fixes : - GraphicsMagick is now participating in Google's oss-fuzz project - JNG: Require that the embedded JPEG image have the same dimensions as the JNG image as provided by JHDR. Avoids a heap write overflow. - MNG: Arbitrarily limit the number...

CVE-2018-11363

jpegsize in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read...

PDFGen Heap Buffer Over-Read Vulnerability

PDFGen is a simple C PDF creation/generation library. A heap buffer over-read vulnerability exists in jpegsize in pdfgen.c in PDFGen. An attacker could exploit this vulnerability to cause a denial of service...

[SECURITY] Fedora 27 Update: exiv2-0.26-10.fc27

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

[SECURITY] Fedora 28 Update: exiv2-0.26-10.fc28

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...