PT-2020-7470

Name of the Vulnerable Software and Affected Versions: XnView versions prior to 2.13 Description: The issue arises from the improper handling of RLE strip lengths during the processing of RGB files, allowing remote attackers to execute arbitrary code via the RLE strip size field in a RGB file. Th...

GraphicsMagick Component Buffer Overflow DoS

The vulnerability of the coders/tiff.c component in the cross-platform library for working with graphics in GraphicsMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially crafted RGB TIFF...

CVE-2019-18845

The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users including low integrity processes to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling process via...

CVE-2019-18845

The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users including low integrity processes to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling process via...

Design/Logic Flaw

The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users including low integrity processes to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling process via...

CVE-2019-18845

The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users including low integrity processes to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling process via...

CVE-2019-18845

CVE-2019-18845 concerns the Patriot Viper RGB drivers MsIo64.sys and MsIo32.sys (pre-1.1). The vulnerability allows local attackers (including low integrity processes) to read/write arbitrary memory by mapping physical memory via ZwOpenSection/ZwMapViewOfSection, enabling the elevation to NT AUTH...

CVE-2019-18845: Improper Privilege Management

The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users including low integrity processes to read and write to arbitrary memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, by mapping \Device\PhysicalMemory into the calling process via...

PT-2019-15697

Name of the Vulnerable Software and Affected Versions Patriot Viper RGB versions prior to 1.1 Description The issue allows local users, including those with low integrity processes, to read and write to arbitrary memory locations. This can lead to the gain of NT AUTHORITYSYSTEM privileges by...

Patriot Viper RGB Local Elevation of Privilege Vulnerability

The Patriot Viper RGB is a memory module device from Patriot Corporation of Taiwan, China. A local elevation of privilege vulnerability exists in the MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB versions prior to 1.1, which can be exploited by a local attacker to read or write to memory...

EulerOS 2.0 SP5 : libcroco (EulerOS-SA-2019-2203)

According to the versions of the libcroco package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buff...

openSUSE Security Update : links (openSUSE-2019-2185)

This update for links fixes the following issues : links was updated to 2.20.1 : - libevent bug fixes links was updated to 2.20 : - Security bug fixed: when links was connected to tor, it would send real dns requests outside the tor network when the displayed page contains link elements with...

poppler security update

0.66.0-11.el80.12 - Ignore dict Length if it is broken - Resolves: 1741146 0.66.0-11.el80.11 - Check whether input is RGB in PSOutputDev::checkPageSlice - also when using '-optimizecolorspace' flag - Resolves: 1741145 0.66.0-11.el80.10 - Fail gracefully if not all components of JPEG2000Stream -...

libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c

A vulnerability was found in LibTIFF, where an out-of-bounds write in the cpTags function in tools/tiff2bw.c and tools/pal2rgb.c could lead to a denial of service., anattacker could exploit this flaw by convincing a victim to open a specially crafted file, potentially causing the application to...

Friday Squid Blogging: Toraiz SQUID Digital Sequencer

Pioneer DJ has a new sequencer: the Toraiz SQUID: Sequencer Inspirational Device. The 16-track sequencer is designed around jamming and performance with a host of features to create "happy accidents" and trigger random sequences, modulations and chords. There are 16 RGB pads for playing in your...

ALPINE-CVE-2019-7636

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDLGetRGB in video/SDLpixels.c...

DEBIAN-CVE-2019-7636

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDLGetRGB in video/SDLpixels.c...

UBUNTU-CVE-2019-7636

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDLGetRGB in video/SDLpixels.c...

Adobe Acrobat Pro DC U3D RGB Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat Pro DC U3D RGB Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...