CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

checkout2.sun-sentinel.com XSS vulnerability

Open Bug Bounty ID: OBB-619850 Description| Value ---|--- Affected Website:| checkout2.sun-sentinel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial Of Service (DoS)

ImageMagick is susceptible to denial of service DoS. It allows a malicious user to crash the application by passing a malicious SUN file to the ReadSUNImage in coders/sun.c, causing a heap-buffer-overflow in SetGrayscaleImage...

ImageMagick Heap Buffer Over Read Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A heap buffer over-read vulnerability exists in ReadSUNImage in coders/sun.c in ImageMagick 7.0.7-23 Q16 x8664 2018-01-24. An attacker can exploit this vulnerability t...

CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

DEBIAN-CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

CVE-2018-11251

Summary: CVE-2018-11251 affects ImageMagick (notably 7.0.7‑23 Q16 x86_64) where a heap-based overflow in ReadSUNImage (sun.c) enables a crafted SUN image to trigger a denial of service via SetGrayscaleImage (MagickCore/quantize.c). What’s affected (from the provided sources): ImageMagick releases...

CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

RedDawn Espionage Campaign Shows Mobile APTs on the Rise

A sophisticated and targeted mobile espionage campaign has been found targeting North Korean defectors. Mounted by a relatively new APT actor known as Sun Team, the offensive used Google Play and Facebook as attack vectors; and overall, it shows how quickly the mobile threat landscape is evolving...

CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

UBUNTU-CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

Solaris 10 (sparc) : 123246-11

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Availability Suite Service. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to...

Solaris 10 (x86) : 143507-13

GNOME 2.6.0x86: Python patch. Date this patch was last updated by Sun : May/15/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid109858; scriptversion"1.4"; scriptcvsdate"Date:...

sun-indonesia.com XSS vulnerability

Open Bug Bounty ID: OBB-616162 Description| Value ---|--- Affected Website:| sun-indonesia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Unauthorized Operation Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the HTTP data path subsystems subcomponent of the Sun ZFS Storage AK component in Oracle Sun...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Unauthorized Operation Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the API frameworks subcomponent of the Sun ZFS Storage AK component in the Oracle Sun Systems...

Oracle Sun Systems Products Suite Hardware Management Pack Component Unauthorized Operation Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Hardware Management Pack is one of the hardware management components. A security vulnerability exists in the Ipmitool subcomponent of the Hardware Management Pack component of the Oracle Sun Systems...

classifieds.baltimoresun.com XSS vulnerability

Open Bug Bounty ID: OBB-611276 Description| Value ---|--- Affected Website:| classifieds.baltimoresun.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...