PT-2017-2556 · Adobe +1 · Flash Player +1

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 26.0.0.131 and earlier Description: The issue is caused by a buffer overflow in the memory, related to the Action Script 3 raster data model in Adobe Flash Player. This can lead to arbitrary code execution if...

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player allows a perpetrator to execute arbitrary code.

The vulnerability of the component responsible for internal representation of raster data in the Adobe Flash Player arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotel...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-19924)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

UBUNTU-CVE-2017-3079

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3079

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution...

flash-plugin: multiple code execution issues fixed in APSB17-17

Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of raster data. Successful exploitation could lead to arbitrary code execution...

[SECURITY] Fedora 26 Update: sane-backends-1.0.25-7.fc26

Scanner Access Now Easy SANE is a universal scanner interface. The SANE application programming interface API provides standardized access to any raster image scanner hardware flatbed scanner, hand-held scanner, video and still cameras, frame-grabbers, etc...

The vulnerability of Google Chrome browser allows a perpetrator to gain access to protected information.

The vulnerability of the Blink component in Google Chrome’s browser is related to poor selection in raster manipulation. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information through a specially created HTML page...

CUPS: Buffer overflow

Background CUPS, the Common Unix Printing System, is a full-featured print server. Description A vulnerability has been discovered in CUPS concerning the handling of compressed raster files. Impact A remote attacker could possibly execute arbitrary code with the privileges of the process...

The vulnerability of Google Chrome browser allows a malicious individual to execute arbitrary code or trigger a service denial.

Google Chrome browser contains a vulnerability related to errors in the implementation of the exchange buffer. Exploiting this vulnerability allows malicious actors to remotely cause system failures or other effects on the system, resulting in the generation of non-standard raster data...

DEBIAN-CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

cups: cupsRasterReadPixels buffer overflow

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way CUPS handled compressed raster image files. An attacker could create a specially crafted image file that, when passed via the CUPS Raster filter, could cause the CUPS filter to crash...

Updated postgis packages fix security vulnerabilities

Updated postgis packages fix security vulnerability: The PostGIS Raster support in PostGIS before 2.1.3 may give more privileges to users than an administrator is willing to grant. These include reading files from the filesystem and opening connections to network hosts. The postgis package has be...

MGASA-2015-0207 Updated postgis packages fix security vulnerabilities

Updated postgis packages fix security vulnerability: The PostGIS Raster support in PostGIS before 2.1.3 may give more privileges to users than an administrator is willing to grant. These include reading files from the filesystem and opening connections to network hosts. The postgis package has be...

CUPS integer overflow

Integer overflow on compressed raster files parsing...

USN-2520-1 cups vulnerability

Peter De Wachter discovered that CUPS incorrectly handled certain malformed compressed raster files. A remote attacker could use this issue to cause CUPS to crash, resulting in a denial of service, or possibly execute arbitrary code...

DSA-3172-1 cups - security update

Bulletin has no description...

Apple CUPS cupsRasterReadPixels buffer overflow vulnerability

Apple CUPS is the United States Apple Apple company's set of open source for OS X and Unix-like system printing system. The system is based on the Internet Printing Protocol IPP, providing most PostScript and raster printer services. A buffer overflow vulnerability exists in Apple CUPS...

DEBIAN-CVE-2014-9679

Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow...

Integer overflow

Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow...