DEBIAN-CVE-2018-16323

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the...

UBUNTU-CVE-2018-16323

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the...

libbpg libavcodec Buffer Overflow Vulnerability

libbpg is a new image format library. libavcodec is one of the general-purpose encoding/decoding libraries. A buffer overflow vulnerability exists in the 'restoretqbpixels' function in the hevcfilter.c file of libavcodec in libbpg version 0.9.8 and other products. A remote attacker could exploit...

Apple Blocks Sites From Abusing HSTS Security Standard to Track Users

If you are unaware, the security standard HTTP Strict Transport Security HSTS can be abused as a 'supercookie' to surreptitiously track users of almost every modern web browser online without their knowledge even when they use "private browsing." Apple has now added mitigations to its open-source...

CVE-2018-7714

DISPUTED The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because pixels = 130 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which...

CVE-2018-7714

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because pixels = 130 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which can raise...

CVE-2018-7714

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because pixels = 130 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which can raise...

Infogram: Memory Corruption via Large Pixels

A memory corruption vulnerability was reported in an image processing service. By uploading a maliciously crafted image with extremely large dimensions, an attacker could cause the service to allocate an excessive amount of memory during image processing, potentially leading to memory corruption...

ImageMagick 'PersistPixelCache' Function Denial of Service Vulnerability

ImageMagick is a set of open source image processing software. The software can read, convert and write images in a variety of formats. A security vulnerability exists in the 'PersistPixelCache' function of the magick/cache.c file in ImageMagick. A remote attacker can exploit this vulnerability...

UBUNTU-CVE-2017-14400

In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which allows remote attackers to cause a denial of service NULL pointer dereference in the function GetVirtualPixels in MagickCore/cache.c via a crafted file...

CVE-2017-11360

The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...

UBUNTU-CVE-2017-11360

The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...

CVE-2016-7515

The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the number of pixels...

CVE-2016-7515

The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the number of pixels...

ImageMagick 'DecodePSDPixels' Function Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'DecodePSDPixels' function of ImageMagick's coders/psd.c file, which c...

DEBIAN-CVE-2014-9843

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors...

Million Pixels 3 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: Authentication Bypass Date: 16.01.2017 Vendor Homepage: http://e-topbiz.com/ Script Name: Million Pixels 3 Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php Author: İhsan Şencan Author Web: http://ihsan.net...

Million Pixels 3 SQL Injection

Vulnerability: Authentication Bypass Date: 16.01.2017 Vendor Homepage: http://e-topbiz.com/ Script Name: Million Pixels 3 Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Million Pixels 3 - Authentication Bypass

Vulnerability: Authentication Bypass Date: 16.01.2017 Vendor Homepage: http://e-topbiz.com/ Script Name: Million Pixels 3 Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Million Pixels 3 - Authentication Bypass

Million Pixels 3 - Authentication Bypass Vulnerability: Authentication Bypass Date: 16.01.2017 Vendor Homepage: http://e-topbiz.com/ Script Name: Million Pixels 3 Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php Author: İhsan Şencan Author Web: http://ihsan.net Mail :...