Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities

The version of Autodesk SketchBook Pro installed on the remote host is prior to 6.2.6. It is, therefore, affected by integer and heap-based buffer overflow vulnerabilities. Using a specially crafted PSD or PXD file, an attacker could cause a denial of service or execute arbitrary code. C Tenable...

Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities

The version of Autodesk SketchBook Pro installed on the remote Mac OS X host is prior to 6.2.6. It is, therefore, affected by integer and heap-based buffer overflow vulnerabilities. Using a specially crafted PSD or PXD file, an attacker could cause a denial of service or execute arbitrary code. C...

Integer overflow

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-3938

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-3938

Autodesk SketchBook Pro is affected if installed version is prior to 6.2.6. The vulnerability arises from integer overflow and heap-based buffer overflow triggered by crafted layer mask data in a PSD file, which can lead to remote code execution (per the connected Nessus entries). The issue speci...

PT-2014-5618

Name of the Vulnerable Software and Affected Versions Autodesk SketchBook Pro versions prior to 6.2.6 Description The issue is related to an integer overflow that can be triggered by crafted layer mask data in a PSD file, leading to a heap-based buffer overflow. This can allow remote attackers to...

CVE-2014-3938: Undefined Security Weakness

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

openSUSE Security Update : ImageMagick (openSUSE-SU-2014:0362-1)

ImageMagick was updated to fix a buffer overflow in handling of PSD images. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-206. The text description of this plugin is C SUSE LLC...

Medium: ImageMagick

Issue Overview: A buffer overflow flaw was found in the way ImageMagick handled PSD images that use RLE encoding. An attacker could create a malicious PSD image file that, when opened in ImageMagick, would cause ImageMagick to crash or, potentially, execute arbitrary code with the privileges of t...

Debian DSA-2898-1 : imagemagick - security update

Several buffer overflows were found in Imagemagick, a suite of image manipulation programs. Processing malformed PSD files could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] [DSA 2898-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2897-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 09, 2014 http://www.debian.org/security/faq -...

DSA-2898-1 imagemagick - security update

Bulletin has no description...

Debian Security Advisory DSA 2898-1 (imagemagick - security update)

Several buffer overflows were found in Imagemagick, a suite of image manipulation programs. Processing malformed PSD files could lead to the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2898.nasl 9136 2018-03-19 13:08:02Z cfischer $ Auto-generated from advisory DSA 2898-1 using...

Autodesk SketchBook Pro PSD通道RLE解压缓冲区溢出漏洞

Bugtraq ID:66563 CVE ID:CVE-2013-5365 Autodesk SketchBook Pro是速写簿软件。 Autodesk SketchBook Pro解压PSD文件内的RLE压缩通道数据时存在边界错误，这可使远程攻击者通过特制的PSD文件，利用此漏洞造成堆缓冲区溢出。 0 Autodesk SketchBook Pro 6.2.4 build 425798 for Windo 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

CVE-2013-5365

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

Heap overflow

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

CVE-2013-5365

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

CVE-2013-5365

Autodesk SketchBook vulnerability CVE-2013-5365 is a heap-based buffer overflow in affected SketchBook variants (Enterprise 2014, Pro, Express before 6.25; Copic Edition before 2.0.2). The flaw occurs while decompressing RLE-compressed channel data in PSD files, enabling remote code execution. Re...

PT-2014-2918

Name of the Vulnerable Software and Affected Versions Autodesk SketchBook for Enterprise versions prior to 6.25 Autodesk SketchBook Pro versions prior to 6.25 Autodesk SketchBook Express versions prior to 6.25 Autodesk SketchBook Copic Edition versions prior to 2.0.2 Description The issue allows...

CVE-2013-5365: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...