CVE-2020-26208

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting i...

CVE-2020-26208

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting i...

CVE-2020-26208 Heap-buffer-overflow in jhead

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting i...

CVE-2020-26208

CVE-2020-26208 affects JHEAD. A heap-buffer-overflow in ReadJpegSections (jhead-3.04, jpgfile.c:285) could cause a program crash or return incorrect EXIF data when processing crafted JPEGs. Public advisories across multiple sources (NVD, OSV, Ubuntu USN references) confirm the issue and advise up...

Santesoft Dicom Viewer Pro 缓冲区错误漏洞

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro J2K, which can be exploited by attackers to execute code in the context of the current process...

Santesoft Dicom Viewer Pro 缓冲区错误漏洞

Sante DICOM Viewer Pro is a medical DICOM image viewer. sante DICOM Viewer Pro J2K remote code execution vulnerability can be exploited by attackers to execute code in the context of the current process...

Santesoft DICOM Viewer Pro 安全漏洞

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro JP2, which can be exploited by attackers to execute code in the context of the current process...

Bentley Systems MicroStation 缓冲区错误漏洞

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. Bentley MicroStation CONNECT 10.16.0.80 is vulnerable to an out-of-bounds read when parsing J2K files, which could be exploited by remote attackers to exploit this vulnerability to...

Mageia: Security Advisory (MGASA-2018-0457)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0038)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0201)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0016)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2013-0322)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

brander (>=0.1.6 <=0.1.9), chin-plugin-convert-svg (>=0.0.1 <=0.0.3) +3 more potentially affected by CVE-2021-23631 via convert-svg-to-jpeg (>=0.3.3 <=0.5.0)

convert-svg-to-jpeg NPM version =0.3.3, =0.1.6, =0.0.1, =0.0.3, =0.2.6, =0.2.21 - xd2svg =0.8.0 Source cves: CVE-2021-23631 Source advisory: OSV:GHSA-JV7G-9G6Q-CXVW...

GHSA-JV7G-9G6Q-CXVW Path Traversal in convert-svg packages

This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a converted PNG file...

SUSE SLED12 / SLES12 Security Update : zxing-cpp (SUSE-SU-2022:0163-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0163-1 advisory. - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafte...

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude lies in the reading of data beyond the buffer in memory. This allows attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected...

CVE-2021-23631

CVE-2021-23631 affects convert-svg-core, convert-svg-to-png, and convert-svg-to-jpeg. A crafted SVG can trigger Directory Traversal via the SVG File Handler, enabling an attacker to read arbitrary filesystem files and render their contents as a PNG/JPEG image. Affected software is the entire vers...

PT-2022-18230 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.16 Description: The issue arises in the image load jpeg function within image.cxx when it calls malloc. The img-width and img-height values are large enough to cause an integer overflow. As a result, the malloc function ma...

convert-svg 路径遍历漏洞

convert-svg is open source series of open source software for converting SVG format files to other formats. A security vulnerability exists in convert-svg, which can be exploited by an attacker to read an arbitrary file from the filesystem via a carefully constructed SVG file and then display the...