1218 matches found
CVE-2014-2030
CVE-2014-2030 targets ImageMagick, specifically the WritePSDImage function in coders/psd.c. It is a stack-based buffer overflow that may allow denial of service or remote code execution via a crafted PSD image, involving the L%06ld string; the issue is noted for 6.8.8-5 and is described as a diff...
imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in RoundToUnity
Detailed Report: https://oss-fuzz.com/testcase?key=5664114030673920 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: RoundToUnity CompositeImage...
NewStart CGSL CORE 5.05 / MAIN 5.05 : exiv2 Multiple Vulnerabilities (NS-SA-2019-0229)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has exiv2 packages installed that are affected by multiple vulnerabilities: - In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the == 0x1c case...
free-psd-templates.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1023372 Security Researcher geeknik Helped patch 8847 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting free-psd-templates.com...
psd-distribution.fr Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1003345 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2018-19107
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp called from psdimage.cpp in the PSD image reader may suffer from a denial of service heap-based buffer over-read caused by an integer overflow via a crafted PSD image file...
CVE-2019-12810
A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitra...
Memory corruption
A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitra...
CVE-2019-12810
A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitra...
CVE-2019-12810
CVE-2019-12810 affects ESTsoft ALSee (versions 5.3 through 8.39). The vulnerability is a memory corruption in the .PSD parsing functionality that allows an out-of-bounds write, resulting in arbitrary code execution when a user opens a specially crafted .PSD file. Exploitation requires the victim ...
exempi security update
CentOS Errata and Security Advisory CESA-2019:2048 An update for exempi is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp called from psdimage.cpp in the PSD image reader may suffer from a denial of service heap-based buffer over-read caused by an integer overflow via a crafted PSD image file...
exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service infinite loop caused by an integer overflow via a crafted PSD image file...
exempi: Heap-based buffer overflow in PSD_MetaHandler::CacheFileData function in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp allows for denial of service via crafted XLS file
An integer wraparound, leading to a buffer overflow, was found in Exempi in the way it handles Adobe Photoshop Images. An attacker could exploit this to cause a denial of service via a crafted image file...
Ubuntu 16.04 LTS / 18.04 LTS : Exiv2 vulnerabilities (USN-4056-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4056-1 advisory. It was discovered that Exiv2 incorrectly handled certain PSD files. An attacker could possibly use this issue to cause a denial of service...
USN-4056-1: Exiv2 vulnerabilities
It was discovered that Exiv2 incorrectly handled certain PSD files. An attacker could possibly use this issue to cause a denial of service. CVE-2018-19107, CVE-2018-19108 It was discovered that Exiv2 incorrectly handled certain PNG files. An attacker could possibly use this issue to cause a denia...
Memory Corruption Vulnerability in Photo Lab Processing of psd Images
Photo Lab is a foreign photo viewing tool. A memory corruption vulnerability exists in Photo Lab's handling of psd images. An attacker can cause the program to crash by constructing a malformed psd image, which if successfully exploited can lead to arbitrary code execution...
DEBIAN-CVE-2019-7395
In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c...