PSD Banking - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PSD Banking published at the 'play' market has multiple vulnerabilities...

PhotoLine Handles PSD Files with Memory Corruption Vulnerability

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the PSD format, which can be exploited by an attacker to construct malformed PSD files that can crash the program and cause a denial of service condition...

Apple QuickTime < 7.7.79.80.95 - PSD File Parsing Memory Corruption

Exploit for multiple platform in category dos / poc Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1769 1 Introduction 2 Report...

Apple QuickTime 7.7.79.80.95 - .PSD Parsing Memory Corruption

Apple QuickTime 7.7.79.80.95 - .PSD Parsing Memory Corruption Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1769 1 Introduction 2...

Apple QuickTime < 7.7.79.80.95 - '.PSD' Parsing Memory Corruption

Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1769 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1...

Amazon Linux: Security Advisory (ALAS-2014-420)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2014-336)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secunia Research: Oracle Outside In ibpsd2.dll PSD File Processing Buffer Overflow Vulnerability

====================================================================== Secunia Research 16/04/2015 Oracle Outside In ibpsd2.dll PSD File Processing Buffer Overflow Vulnerability ====================================================================== Table of Contents Affected...

Mandriva Linux Security Advisory : imagemagick (MDVSA-2015:105)

Updated imagemagick package fixes security vulnerabilities : A buffer overflow flaw was found in the way ImageMagick handled PSD images that use RLE encoding. An attacker could create a malicious PSD image file that, when opened in ImageMagick, would cause ImageMagick to crash or, potentially,...

PT-2014-9046

Name of the Vulnerable Software and Affected Versions ImageMagick version 6.8.9-9 Description A heap overflow issue exists, which can be triggered by a crafted psd file. Recommendations For ImageMagick version 6.8.9-9, update to a newer version that contains a fix for this issue...

CVE-2014-9828

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file...

CVE-2014-9833

Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file...

UBUNTU-CVE-2014-9828

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file...

UBUNTU-CVE-2014-9843

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors...

UBUNTU-CVE-2014-9833

Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file...

PT-2014-9042 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to have an unspecified impact via a crafted psd file. This is related to the coders/psd.c component in ImageMagick. Recommendations: At the moment, the...

Amazon Linux AMI : GraphicsMagick (ALAS-2014-420)

A buffer overflow flaw affecting ImageMagick and GraphicsMagic when handling PSD images was reported. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2014-420. include"compat.inc"; if description...

Amazon Linux AMI : ImageMagick (ALAS-2014-336)

A buffer overflow flaw was found in the way ImageMagick handled PSD images that use RLE encoding. An attacker could create a malicious PSD image file that, when opened in ImageMagick, would cause ImageMagick to crash or, potentially, execute arbitrary code with the privileges of the user running...

Medium: GraphicsMagick

Issue Overview: A buffer overflow flaw affecting ImageMagick and GraphicsMagic when handling PSD images was reported. Affected Packages: GraphicsMagick Issue Correction: Run yum update GraphicsMagick or yum update --advisory ALAS-2014-420 to update your system. New Packages: i686: ...

Updated graphicsmagick packages fix CVE-2014-1947

Updated graphicsmagick packages fix security vulnerability: A buffer overflow flaw was found in the way GraphicsMagick writes PSD images when the input data has a large number of layers. Due to the compilation options used in Mageia, the buffer overflow is reduced to a crash, making this a denial...