USN-3060-1: GD library vulnerabilities

It was discovered that the GD library incorrectly handled certain malformed TGA images. If a user or automated system were tricked into processing a specially crafted TGA image, an attacker could cause a denial of service. CVE-2016-6132, CVE-2016-6214 It was discovered that the GD library...

Updated libgd packages fix security vulnerability

Updated libgd packages fix security vulnerabilities: A read out-of-bounds was found in the parsing of TGA files when the header reports an incorrect size CVE-2016-6132 or invalid bpp CVE-2016-6214 or RLE value upstream issue 248. Integer overflow error within gdContributionsAlloc CVE-2016-6207. A...

gd -- multiple vulnerabilities

Pierre Joye reports: fix php bug 72339, Integer Overflow in gd2GetHeader CVE-2016-5766 gd: Buffer over-read issue when parsing crafted TGA file CVE-2016-6132 Integer overflow error within gdContributionsAlloc CVE-2016-6207 fix php bug 72494, invalid color index not handled, can lead to crash...

CVE-2016-6214

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

CVE-2016-6214

gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

CVE-2016-6132

The gdImageCreateFromTgaCtx function in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

Libgd Out-of-Bounds Read Vulnerability

libgd is an open source library for dynamically creating images, which supports the creation of charts, graphs, thumbnails and more. libgd fails to properly parse TGA files, which can be exploited by remote attackers to cause an out-of-bounds read...

UBUNTU-CVE-2016-6132

The gdImageCreateFromTgaCtx function in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

CVE-2016-6132

The gdImageCreateFromTgaCtx function in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

openSUSE Security Update : gdk-pixbuf (openSUSE-2016-669)

This update for gdk-pixbuf fixes the following issues : - CVE-2015-7552: Fixed various overflows in image handling boo958963. - CVE-2015-7673: Fixed an overflow and DoS with a TGA file boo948790. - CVE-2015-7674: Fixed overflow when scaling a gif boo948791. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : gdk-pixbuf (openSUSE-2016-405)

This update for gdk-pixbuf fixes the following issues : - CVE-2015-7552: Fixed various overflows in image handling boo958963. - CVE-2015-7673: Fixed an overflow and DoS with a TGA file boo948790. - CVE-2015-7674: Fixed overflow when scaling a gif boo948791. %NASLMINLEVEL 70300 C Tenable Network...

FFmpeg Denial of Service Vulnerability (CNVD-2016-01132)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/gif.c file in FFmpeg versions prior to 2.8.6, which is caused by the program's failure to correctly calculate the buffer size. This...

CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

UBUNTU-CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

CVE-2016-2330

libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted .tga file, related to the gifimagewriteimage, gifencodeinit, and...

CVE-2015-8894

Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service application crash via a crafted tga file...

UBUNTU-CVE-2015-8894

Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service application crash via a crafted tga file...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2015-08325)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in the gdk-pixbuf configuration of Mozilla Firefox versions prior to 43.0 on the Linux GNOME platform, which stems from the program failing to properly enable th...

CVE-2015-7217

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted Truevision TGA image...

Heap overflow

The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted Truevision TGA image...