Code injection

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service memory consumption via a JPEG image with a crafted sequence of restart markers...

Integer overflow

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

Out-of-bounds

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service crash via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read...

CVE-2012-0260

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service memory consumption via a JPEG image with a crafted sequence of restart markers...

CVE-2012-1610

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

CVE-2012-1610

CVE-2012-1610 affects ImageMagick: GetEXIFProperty in magick/property.c can overflow when processing EXIF tags with large component counts in a JPEG, leading to an out-of-bounds read and potential DoS. Affected releases reported include ImageMagick before 6.7.6-4; mitigation is to upgrade to 6.7....

CVE-2012-0259

CVE-2012-0259 affects ImageMagick where the GetEXIFProperty function (magick/property.c) is vulnerable when processing JPEG EXIF XResolution tags. In ImageMagick versions before 6.7.6-3, a zero value in the component count can trigger an out-of-bounds read, leading to a denial of service (crash)....

CVE-2012-1610

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

CVE-2012-0260

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service memory consumption via a JPEG image with a crafted sequence of restart markers...

CVE-2012-0260

CVE-2012-0260 affects ImageMagick prior to 6.7.6-3: the JPEGWarningHandler in coders/jpeg.c can be triggered by a crafted JPEG with specific restart marker sequences, causing memory consumption DoS. Affected versions are ImageMagick before 6.7.6-3; remediation is to upgrade to a fixed release (6....

autocorr, broffice.org, openoffice.org security update

CentOS Errata and Security Advisory CESA-2012:0705 Updated openoffice.org packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

CVE-2012-0260: Uncontrolled Resource Consumption

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service memory consumption via a JPEG image with a crafted sequence of restart markers...

openoffice.org security update

1:3.2.1-19.6.0.1.el62.7 - Replaced RedHat colors with Oracle colors, OOOVENDOR with Oracle Corp., and the filename redhat.soc with oracle.soc in specfile 1:3.2.1-19.6.7 - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by processing invalid Escher graphics records length in th...

ImageMagick < 6.7.6-3 Multiple Vulnerabilities

The remote Windows host is running a version of ImageMagick earlier than 6.7.6-3 and is, therefore, affected by the following vulnerabilities : - An error exists in the function 'GetEXIFProperty' in the file 'magick/property.c' that can cause the application to crash when processing JPEG 'EXIF'...

CVE-2012-1610: Integer Overflow or Wraparound

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

CVE-2012-0259: Out-of-bounds Read

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service crash via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read...

CVE-2012-0260

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service memory consumption via a JPEG image with a crafted sequence of restart markers...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Debian Security Advisory DSA 2473-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2473-1. OpenVAS Vulnerability Test $Id: deb24731.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2473-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

libjpeg-turbo -- heap-based buffer overflow

The Changelog for version 1.2.1 says: Fixed a regression caused by 1.2.06 in which decompressing corrupt JPEG images specifically, images in which the component count was erroneously set to a large value would cause libjpeg-turbo to segfault. A Heap-based buffer overflow was found in the way...