Security update for gimp (low)

openSUSE Security Update: Security update for gimp Announcement ID: openSUSE-SU-2020:1420-1 Rating: low References: 1073627 Cross-References: CVE-2017-17789 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for gimp fixes the...

SUSE-SU-2020:2604-1 Security update for gimp

This update for gimp fixes the following issue: - CVE-2017-17789: Fix heap buffer overflow in PSP importer bsc1073627...

Arbitrary Code Execution

gimp is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the GIMP's Paint Shop Pro PSP image file plug-in. An attacker could create a specially-crafted PSP image file that, when opened, could cause the PSP plug-in to crash or, potentially, execute arbitrary...

Web skimmer phishes credit card data via rogue payment service platform

Heading into the holiday shopping season, we have been tracking increased activity from a threat group registering domains for skimming and phishing campaigns. While most of the campaigns implemented a web skimmer in the typical fashion—grabbing and exfiltrating data from a merchant's checkout pa...

CVE-2019-9836

Technical details about CVE-2019-9836 are not publicly available in the provided connected documents. The materials reference kernel-firmware updates and CVE linkage, but do not specify affected products/versions, root cause, or fixes. Monitor for updates.

Sony PlayStation Vita (PS Vita) - Trinity: PSP Emulator Escape

Trinity is a fully chained exploit for the PS Vita™ consisting of six unique vulnerabilities. It is based on a decade of knowledge and research. The source code of Trinity can be found here. Table of Contents - Table of Contents - Introduction - MIPS Kernel Exploit Type Confusion Double-fetch Rac...

WinAVI iPod3GPMP4PSP Converter 4.4.2 - Denial of Service

WinAVI iPod3GPMP4PSP Converter 4.4.2 - Denial of Service Exploit Title: WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 Local Dos Exploit Date: 16.03.2019 Vendor Homepage:http://www.winavi.com Software Link: http://www.winavi.com/user/download/WinAVIiPod3GPMP4PSPConverter.exe Exploit Author: Achilles...

The vulnerability of the `read_channel_data` function in the GIMP graphic editor’s plug-ins/common/file-psp.c file, related to the issue of exceeding the buffer memory limit, allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the readchanneldata function in the plug-ins/common/file-psp.c file of the GIMP graphic editor, as well as the GNU Image Manipulation Program, is related to the issue of leaving data outside of the memory buffer. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...

psp-logistics.com XSS vulnerability

Open Bug Bounty ID: OBB-599582 Description| Value ---|--- Affected Website:| psp-logistics.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-8936

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor PSP privilege escalation...

Privilege escalation

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor PSP privilege escalation...

CVE-2018-8936

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor PSP privilege escalation...

CVE-2018-8936

The CVE-2018-8936 entry concerns AMD processors (EPYC Server, Ryzen, Ryzen Pro, Ryzen Mobile) where the Platform Security Processor (PSP) enables privilege escalation. The connected documents corroborate that this is a PSP-based elevation issue affecting multiple Ryzen-family products. Specifics ...

AMD Acknowledges Newly Disclosed Flaws In Its Processors — Patches Coming Soon

AMD has finally acknowledged 13 critical vulnerabilities, and exploitable backdoors in its Ryzen and EPYC processors disclosed earlier this month by Israel-based CTS Labs and promised to roll out firmware patches for millions of affected devices 'in the coming weeks.' According to CTS-Labs...

CVE-2017-17789

In GIMP 2.8.22, there is a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c...

GIMP 'read_channel_data' function heap buffer overflow vulnerability

GIMP GNU Image Manipulation Program, GNU Image Manipulation Program is a cross-platform open source image processing software developed by the GIMP team. The software enables a variety of image processing, including photo retouching, image compositing and image creation. A heap buffer overflow...

UBUNTU-CVE-2017-17789

In GIMP 2.8.22, there is a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c...

Easy Vedio to PSP Converter 1.6.20 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Easy Vedio to PSP Converter 1.6.20 - Local Buffer Overflow SEH Date: 28-08-2017 Exploit Author: Kishan Sharma Email : email protected Vulnerable Software: Easy Vedio to PSP Converter Vendor Homepage:...

Easy Vedio to PSP Converter 1.6.20 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Easy Vedio to PSP Converter 1.6.20 - Local Buffer Overflow SEH Date: 28-08-2017 Exploit Author: Kishan Sharma Email : [email protected] Vulnerable Software: Easy Vedio to PSP Converter Vendor Homepage: http://www.divxtodvd.net/ Version: 1.6.20 Software Link...