CVE-2020-6822

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Thunderbird 68.7.0, Firefox ESR 68.7, and Firefox 75...

ImageMagick Studio ImageMagick Resource Management Error Vulnerability (CNVD-2020-02272)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio ImageMagick suffers from a resource management error vulnerability. The...

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from insufficient checking of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SUSE-SU-2019:3126-1 Security update for haproxy

This update for haproxy to version 2.0.10 fixes the following issues: HAProxy was updated to 2.0.10 Security issues fixed: - CVE-2019-18277: Fixed a potential HTTP smuggling in messages with transfer-encoding header missing the 'chunked' bsc1154980. - Fixed an improper handling of headers which...

This Week in Security News: Skimming and Phishing Scams Ahead of Black Friday and Polish Hacking Team Wins Capture the Flag Competition

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about recent skimming and phishing scams as we head into the holidays and how you can protect yourself and your organization. Also, re...

The vulnerability of the Thunderbird email client’s libical library lies in the lack of type checking for the objects being passed around. This allows attackers to trigger a service failure.

The vulnerability of the Thunderbird email client’s libical library is related to the lack of type checking during the processing of certain email messages. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Jenkins Script Security plugin, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Jenkins Script Security plugin is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 allows a intruder to cause a service failure.

The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted SIP packet to the vulnerable phone...

The vulnerability of the Word text editor, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Word text editor is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

UBUNTU-CVE-2018-1000840

Processing Foundation Processing version 3.4 and earlier contains a XML External Entity XXE vulnerability in loadXML function that can result in An attacker can read arbitrary files and exfiltrate their contents via HTTP requests. This attack appear to be exploitable via The victim must use...

CVE-2018-0311

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software insufficiently validates...

CVE-2018-0765

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework...

AZL-6785 CVE-2018-1000156 affecting package patch for versions less than 2.7.6-7

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITORPROGRAM invocation using ed can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's...

CVE-2018-1000047

NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execution. This attack appear to be exploitable via Victim opens an untrusted file for optimization using Kodiak library...

USN-3479-1 postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerabilities

David Rowley discovered that PostgreSQL incorrectly handled memory when processing certain JSON functions. A remote attacker could possibly use this issue to obtain sensitive information. CVE-2017-15098 Dean Rasheed discovered that PostgreSQL incorrectly enforced SELECT privileges when processing...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-36019)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadWPGImage' function in the coders/wpg.c file in GraphicsMagick version 1.3.26. A remote attacker can exploit this...

Cisco Small Business SPA300, SPA500 and SPA51x Denial of Service Vulnerabilities

The Cisco Small Business SPA300, SPA500, and SPA51x are all S-series IP phone products from Cisco. A denial of service vulnerability exists in the processing of IP slices in the Cisco Small Business SPA300, SPA500, and SPA51x series of IP phones, which stems from the program's failure to handle...

CVE-2017-11537

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception FPE in the WritePALMImage function in coders/palm.c, related to an incorrect bits-per-pixel calculation...

GraphicsMagick 'ReadDPXImage()' Denial of Service Vulnerability

GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...

CVE-2017-3743

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility ASU, UpdateXpress System Pack Installer UXSPI or Dynamic System Analysis DSA to a second machine, the other users may be able to see the user ID...