218 matches found
DEBIAN-CVE-2017-5896
Heap-based buffer overflow in the fzsubsamplepixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted image...
CVE-2017-5896
Heap-based buffer overflow in the fzsubsamplepixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted image...
DEBIAN-CVE-2017-5991
An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...
PT-2017-16741
Name of the Vulnerable Software and Affected Versions MuPDF version 1.10a ALT Linux affected versions not specified Description The issue is related to a heap-based buffer overflow in the fz subsample pixmap function, which can cause a denial of service due to an out-of-bounds read and crash when...
MuPDF 'fitz/pixmap.c' Heap Buffer Overflow Vulnerability
Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A heap buffer overflow vulnerability exists in MuPDF. An attacker could exploit the vulnerability to execute arbitrary code or cause a denial of service in an affected application environment...
USN-3185-1 libxpm vulnerability
It was discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could use this issue to cause libXpm to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-3185-1: libXpm vulnerability
It was discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could use this issue to cause libXpm to crash, resulting in a denial of service, or possibly execute arbitrary code...
Vulnerability of PHP software, allowing a malicious actor to compromise the accessibility of protected information
The vulnerability in the gdImageCreateFromXpm function in gdxpm.c of the libgd library for PHP allows malicious actors to trigger a denial-of-service attack by using a specially crafted color table in the XPM file. This enables them to cause the application to abort by reassigning a null pointer...
CentOS 5 / 6 : php / php53 (CESA-2014:1326)
Updated php53 and php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...
php, php53 security update
CentOS Errata and Security Advisory CESA-2014:1326 Updated php53 and php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring...
gd: NULL pointer dereference in gdImageCreateFromXpm()
A NULL pointer dereference flaw was found in the gdImageCreateFromXpm function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application using gd via a specially crafted X PixMap XPM file...
Moderate: Red Hat Security Advisory: php53 and php security update
Updated php53 and php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...
qt: QSharedMemory class created shared memory segments with insecure permissions
The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions world-readable and world-writable for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrat...
RedHat Update for libtiff RHSA-2012:1590-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Slackware Advisory SSA:2005-269-02 X.Org pixmap overflow
The remote host is missing an update as announced via advisory SSA:2005-269-02. OpenVAS Vulnerability Test $Id: esoftslkssa200526902.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware: Security Advisory (SSA:2005-269-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for netpbm CESA-2011:1811 centos5 x86_64
Check for the Version of netpbm OpenVAS Vulnerability Test CentOS Update for netpbm CESA-2011:1811 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
RedHat Update for netpbm RHSA-2011:1811-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RHEL 4 / 5 : netpbm (RHSA-2011:1811)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1811 advisory. The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm...
netpbm: Stack-based buffer overflow by processing X PixMap image header fields
Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index val...