7155 matches found
Buffer overflow
Buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted DHT index value in JPEG data within a WRF file, aka...
CVE-2013-1119
Buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted DHT index value in JPEG data within a WRF file, aka...
CVE-2013-1119
CVE-2013-1119 describes buffer overflow vulnerabilities in Cisco WebEx Recording Format (WRF) and ARF players. A crafted DHT index value in JPEG data within a WRF file could allow remote execution of arbitrary code or cause memory corruption leading to denial of service. Affected components inclu...
Amazon Linux AMI : ImageMagick (ALAS-2012-76)
A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format Exif metadata. An attacker could create a specially crafted image file that, when opened by a victim, would cause ImageMagick to crash or, potentially, execute arbitrary code. CVE-2012-0247 A...
Qualcomm Integer overflow camera
Integer overflow and signedness issue in camera JPEG engines CVE-2013-4736 QCIR-2013-00005-1: The JPEG engines that are part of the camera driver provide an ioctl system call interface to user space clients for communication. When processing hardware commands ioctl calls, the drivers are...
Unrestricted file upload
Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitrary code by uploading an executable file with the image/jpeg content type, and then accessing this file via unspecified vectors, as demonstrated by access to ...
Open Source Steganography Web Service: DarkJPEG
DarkJPEG is a new generation open source steganography web service. It is supposed to serve people’s needs for the freedom of communication even in those countries which break human rights by forcing some kind of Internet censorship or even denying to use cryptography by law. The service uses...
Oracle Linux 6 : thunderbird (ELSA-2011-0311)
The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0311 advisory. 3.1.8-4.0.2.el60 - Replace clean.gif in tarball 3.1.8-4.0.1.el60 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.j...
Oracle Linux 6 : libtiff (ELSA-2011-0452)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0452 advisory. 3.9.4-1.el60.3 - Add fix for CVE-2009-5022 Resolves: 696143 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Oracle Linux 5 : netpbm (ELSA-2009-0012)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0012 advisory. 10.35-6.1.el53.1 - fix NVR to be greater than previous release in the main branch Related: 472947 10.35-6.el53.1 - fix CVE-2007-2721 and CVE-2008-3520...
ImageMagick Integer Overflow Vulnerability - 02 June13 (Windows)
The host is installed with ImageMagick and is prone to integer overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbimagemagickintegeroverflowvuln02jun13win.nasl 8173 2017-12-19 11:45:56Z cfischer $ ImageMagick Integer Overflow Vulnerability - 02 June13 Windows Authors: Thanga Prakash S...
ImageMagick Multiple Denial of Service Vulnerabilities - 01 June13 (Windows)
The host is installed with ImageMagick and is prone to multiple denial of service Vulnerabilities. OpenVAS Vulnerability Test $Id: gbimagemagickmultdosvuln01jun13win.nasl 8173 2017-12-19 11:45:56Z cfischer $ ImageMagick Multiple Denial of Service Vulnerabilities - 01 June13 Windows Authors: Thang...
ImageMagick < 6.7.6-3 Multiple DoS Vulnerabilities (Jun 2013) - Windows
ImageMagick is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
ImageMagick < 6.7.6-4 Integer Overflow Vulnerability (Jun 2013) - Windows
ImageMagick is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora Update for openjpeg FEDORA-2013-8953
Check for the Version of openjpeg OpenVAS Vulnerability Test Fedora Update for openjpeg FEDORA-2013-8953 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 17 Update: openjpeg-1.4-15.fc17
OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...
Apple QuickTime Multiple Vulnerabilities (Jun 2013) - Windows
QuickTime Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...
APPLE-SA-2013-05-22-1 QuickTime 7.7.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-22-1 QuickTime 7.7.4 QuickTime 7.7.4 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a maliciously crafted TeXML file may lead to an unexpected application...