Sisfokol 4.0 Arbitrary File Upload Vulnerability

The web application is vulnerable to multiple security vulnerabilities, such as Unauthenticated File Upload Remote Bypass Authentication All form in direktori Sisfokol/janissari/k/ does not require authentication to upload a file. By issuing a POST request with a webshell embedded in a JPEG image...

Oracle Outside In JPEG 2000 CRG Segment Processing Heap Buffer Overflow (CVE-2011-4517)

A heap buffer overflow vulnerability has been reported in Oracle Outside-In...

Oracle Outside In JPEG 2000 QCD Segment Processing Heap Buffer Overflow (CVE-2012-1769)

A remote code execution vulnerability has been reported in Oracle Outside-In...

HCView WriteAV Crash Proof Of Concept

!/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image files ; . Support .jpg,...

Mandriva Linux Security Advisory : openjpeg (MDVSA-2012:157)

A security issue was identified and fixed in openjpeg : A heap-based buffer overflow was found in the way OpenJPEG, an open source JPEG 2000 codec written in C language, performed parsing of JPEG2000 image files. A remote attacker could provide a specially crafted JPEG 2000 file, which when opene...

GLSA-201209-13 : libjpeg-turbo: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201209-13 libjpeg-turbo: User-assisted execution of arbitrary code A vulnerability in the getsos function in jdmarker.c could cause a heap-based buffer overflow. Impact : A remote attacker could entice a user to open a specially...

libjpeg-turbo: User-assisted execution of arbitrary code

Background libjpeg-turbo accelerates JPEG compression and decompression. Description A vulnerability in the getsos function in jdmarker.c could cause a heap-based buffer overflow. Impact A remote attacker could entice a user to open a specially crafted JPEG file in an application linked against...

RedHat Update for openjpeg RHSA-2012:1283-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-3726

Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...

Double free

Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...

CVE-2012-3726

CVE-2012-3726 is a double-free vulnerability in ImageIO’s JPEG handling on iOS prior to iOS 6. The flaw could allow remote code execution or a denial of service via a crafted JPEG image. Public documents underlined in Apple advisories indicate the issue was addressed in the iOS 6 update; no expli...

CVE-2012-3726

Double free vulnerability in ImageIO in Apple iOS before 6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...

openjpeg: heap-based buffer overflow when decoding jpeg2000 files

Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

XnView < 1.99.1 JPEG Compressed TIFF Image Multiple Header Value Handling Overflow

The version of XnView installed on the remote Windows host is earlier than 1.99.1. It is, therefore, reportedly affected by a heap-based buffer overflow vulnerability. This is due to an error in the handling of TIFF image files having JPEG compression. Specially crafted files of this type can...

Slackware Advisory SSA:2004-236-01 Qt

The remote host is missing an update as announced via advisory SSA:2004-236-01. OpenVAS Vulnerability Test $Id: esoftslkssa200423601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Mandrake Linux Security Advisory : netscape (MDKSA-2000:027-1)

Previous versions of Netscape, from version 3.0 to 4.73 contain a serious overflow flaw due to improper input verification in Netscape's JPEG processing code. The way Netscape processed JPEG comments trusted the length parameter for comment fields. By manipulating this value, it was possible to...

Mandriva Linux Security Advisory : imagemagick (MDVSA-2012:078)

Multiple vulnerabilities has been found and corrected in imagemagick : A flaw was found in the way ImageMagick processed images with malformed Exchangeable image file format Exif metadata. An attacker could create a specially crafted image file that, when opened by a victim, would cause ImageMagi...

Mandriva Linux Security Advisory : libjpeg-turbo (MDVSA-2012:121)

A vulnerability has been discovered and corrected in libjpeg-turbo : A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erroneously set to a large value. An attacker could create a specially crafted JPEG image...

Fedora Update for exif FEDORA-2012-10854

Check for the Version of exif OpenVAS Vulnerability Test Fedora Update for exif FEDORA-2012-10854 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for gd FEDORA-2012-9298

Check for the Version of gd OpenVAS Vulnerability Test Fedora Update for gd FEDORA-2012-9298 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...