CVE-2018-7637

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4...

CVE-2018-7638

CVE-2018-7638 affects CImg v.220, with a heap-based buffer over-read in load_bmp within CImg.h when processing crafted BMP images. The issue occurs in the 256-colors path (case 8). Public details in connected sources confirm the vulnerability mechanism but do not provide a concrete vendor patch o...

CVE-2018-7639

CVE-2018-7639 affects CImg v.220 and is a heap-based buffer over-read in load_bmp in CImg.h when loading a crafted BMP image in the 16-colors case (case 16). The issue is triggered by parsing a BMP header/image data and can lead to an out-of-bounds read. NVD metrics indicate a high severity for C...

Design/Logic Flaw

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h...

CVE-2018-7587

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h...

CVE-2018-7587

An issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers an allocation failure in loadbmp in CImg.h...

CVE-2018-7589

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

Double free

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7589

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

CVE-2018-7588 affects the CImg image processing library (v2.20) and is due to a heap-based buffer over-read in the load_bmp function of CImg.h when loading a crafted BMP image. The issue is tied to the BMP-loading path in CImg and can lead to memory over-read during image parsing. In affected env...

CVE-2018-7589

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7589

An issue was discovered in CImg v.220. A double free in loadbmp in CImg.h occurs when loading a crafted bmp image...

Node.js third-party modules: [m-server] Path Traversal allows to display content of arbitrary file(s) from the server

I would like to report Path Traversal in m-server module. It allows to read content of any arbitrary file from the server where m-server is installed and run. Module module name: m-server version: 1.4.0 npm page: https://www.npmjs.com/package/m-server Module Description M-Server is a mini http...

February 22, 2018—KB4075212 (Preview of Monthly Rollup)

None None...

February 22, 2018—KB4077525 (OS Build 14393.2097)

None None...

v-sun.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-558746 Description| Value ---|--- Affected Website:| v-sun.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

February 13, 2018—KB4074588 (OS Build 16299.248)

None None...

Fuji Electric V-Server VPR File Parsing Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...