The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability exists in the ConvolveHorizontally function of Skia for Mozilla Firefox, due to improper rendering of graphic data when this function is executed. Exploiting this vulnerability allows malicious actors to execute arbitrary code, causing prolonged scaling of images; for example,...

CVE-2016-5690

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table...

ImageMagick 6.x < 6.9.4-5 / 7.x < 7.0.1-7 Multiple DoS

The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.4-5 or 7.x prior to 7.0.1-7. It is, therefore, affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists in the DCM reader due to a NULL pointer dereference flaw that is...

UBUNTU-CVE-2016-5690

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table...

CVE-2016-5690

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table...

ImageMagick Multiple Unspecified Vulnerabilities - Mac OS X

ImageMagick is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Update : gdk-pixbuf (openSUSE-2016-669)

This update for gdk-pixbuf fixes the following issues : - CVE-2015-7552: Fixed various overflows in image handling boo958963. - CVE-2015-7673: Fixed an overflow and DoS with a TGA file boo948790. - CVE-2015-7674: Fixed overflow when scaling a gif boo948791. %NASLMINLEVEL 70300 C Tenable Network...

DEBIAN-CVE-2015-8877

The gdImageScaleTwoPass function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.0, as used in PHP before 5.6.12, uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated ...

Design/Logic Flaw

The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an intended HTTPS trust-management feature, via unspecified vectors...

CVE-2016-0323

The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote authenticated users to disable X.509 certificate validation, and consequently bypass an intended HTTPS trust-management feature, via unspecified vectors...

CVE-2016-0323

The CVE-2016-0323 issue affects Liberty for Java running in IBM Bluemix when bound to the Auto-Scaling for Bluemix service, specifically versions prior to 2.7-20160321-1358. The Auto-Scaling agent can disable SSL certificate validation, bypassing the HTTPS trust-management feature. The IBM Bluemi...

Microsoft Windows Graphics Memory Corruption (MS16-039: CVE-2016-0145)

A vulnerability was found in Microsoft Windows that could potentially lead to remote code execution. The main cause is the lack of validation on glyph bitmap boundary during scaling operation. This vulnerability can be exploited using a malformed font file TTF...

openSUSE Security Update : gdk-pixbuf (openSUSE-2016-405)

This update for gdk-pixbuf fixes the following issues : - CVE-2015-7552: Fixed various overflows in image handling boo958963. - CVE-2015-7673: Fixed an overflow and DoS with a TGA file boo948790. - CVE-2015-7674: Fixed overflow when scaling a gif boo948791. %NASLMINLEVEL 70300 C Tenable Network...

Moderate: Red Hat Security Advisory: openstack-heat bug fix and security advisory

Updated OpenStack Orchestration packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 Icehouse for RHEL 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS...

Fedora 22 : roundcubemail-1.1.4-2.fc22 (2015-431d39fbff)

Release 1.1.4 - Add workaround for https://bugs.php.net/bug.php?id=70757 1490582 - Fix duplicate messages in list and wrong count after delete 1490572 - Fix so Installer requires PHP5 - Make brute-force attacks harder by re-generating security token on every failed login 1490549 - Slow down brute...

SUSE-SU-2015:2195-2 Security update for gdk-pixbuf

The gdk pixbuf library was updated to fix three security issues. These security issues were fixed: - CVE-2015-7673: Fix some more overflows scaling a gif bsc948791 - CVE-2015-4491: Check for overflow before allocating memory when scaling bsc942801 - CVE-2015-7673: Fix an overflow and DoS when...

Moderate: Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform 7 director update

Updated packages that fix two security issues and multiple bugs are now available for Red Hat Enterprise Linux OpenStack Platform 7.0 director for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System...

Flexible DDoS Defense: Bohatei

DDoS defense today relies on expensive and proprietary hardware appliances deployed at fixed locations. This introduces key limitations with respect to flexibility e.g., complex routing to get traffic to these “chokepoints” and elasticity in handling changing attack patterns. We observe an...

SUSE SLED12 / SLES12 Security Update : gdk-pixbuf (SUSE-SU-2015:2195-1)

The gdk pixbuf library was updated to fix three security issues. These security issues were fixed : - CVE-2015-7673: Fix some more overflows scaling a gif bsc948791 - CVE-2015-4491: Check for overflow before allocating memory when scaling bsc942801 - CVE-2015-7673: Fix an overflow and DoS when...

SUSE SLED11 / SLES11 Security Update : gtk2 (SUSE-SU-2015:1787-1)

gtk2 was updated to fix two security issues. These security issues were fixed : - CVE-2015-4491: Integer overflow in the makefiltertable function in pixops/pixops.c in gdk-pixbuf before 2.31.5, allowed remote attackers to execute arbitrary code or cause a denial of service heap-based buffer...