libjpeg-turbo -- heap-based buffer overflow

The Changelog for version 1.2.1 says: Fixed a regression caused by 1.2.06 in which decompressing corrupt JPEG images specifically, images in which the component count was erroneously set to a large value would cause libjpeg-turbo to segfault. A Heap-based buffer overflow was found in the way...

Debian Security Advisory DSA 2473-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2473-1. OpenVAS Vulnerability Test $Id: deb24731.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2473-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

DSA-2473-1 openoffice.org - buffer overflow

Bulletin has no description...

IBM Lotus Symphony < 3.0.1 Embedded Image File Handling Remote Overflows

The version of IBM Lotus Symphony on the remote host was found to be earlier than 3.0.1. As such, it is reportedly affected by multiple integer overflows in vlcmi.dll. These vulnerabilities can be triggered by a malicious JPEG or PNG image object embedded in a .DOC file, resulting in arbitrary co...

Apple QuickTime JPEG 2000 COD Length Integer Underflow (CVE-2011-3250)

A remote code execution vulnerability has been reported in Apple QuickTime...

RedHat Update for ImageMagick RHSA-2012:0545-01

Check for the Version of ImageMagick OpenVAS Vulnerability Test RedHat Update for ImageMagick RHSA-2012:0545-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS 5 : ImageMagick (CESA-2012:0545)

Updated ImageMagick packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2012:0544 Updated ImageMagick packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2012:0545 Updated ImageMagick packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...

ImageMagick: Out-of heap-based buffer read by processing crafted JPEG EXIF header tag value

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service crash via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read...

Moderate: Red Hat Security Advisory: ImageMagick security and bug fix update

Updated ImageMagick packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

ImageMagick: excessive CPU use DoS by processing JPEG images with crafted restart markers

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service memory consumption via a JPEG image with a crafted sequence of restart markers...

Moderate: Red Hat Security Advisory: ImageMagick security update

Updated ImageMagick packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Fedora 16 : argyllcms-1.4.0-1.fc16 (2012-6529)

Update to latest upstream release - A colorimeter can now be used as a reference to make ccmx files - Added dither/screening support for 8 bit output of render - Added JPEG file support to cctiff, tiffgamut and extracticc - Fixed double free in icc/icc.c for profiles that have duplicate tags -...

Ubuntu Update for imagemagick USN-1435-1

Ubuntu Update for Linux kernel vulnerabilities USN-1435-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14351.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for imagemagick USN-1435-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

[SECURITY] [DSA 2462-2] imagemagick regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2462-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 3, 2012 http://www.debian.org/security/faq -...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : imagemagick vulnerabilities (USN-1435-1)

Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute...

USN-1435-1: ImageMagick vulnerabilities

Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute...

OpenJPEG CMAP Record Parsing Vulnerability

This host is installed with OpenJPEG and is prone to record parsing vulnerability. OpenVAS Vulnerability Test $Id: secpodopenjpegcmaprecordparsingvuln.nasl 5912 2017-04-10 09:01:51Z teissa $ OpenJPEG CMAP Record Parsing Vulnerability Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...

SWFTools: User-assisted execution of arbitrary code

Background SWFTools is a collection of SWF manipulation and generation utilities written by Rainer Böhme and Matthias Kramm. Description Integer overflow errors in the "getPNG" function in png.c and the "jpegload" function in jpeg.c could cause a heap-based buffer overflow. Impact A remote attack...