PT-2019-9187

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.5 Description The issue concerns a Read Access Violation on Block Data Move, which can be triggered by a crafted image file. This suggests a potential problem with how the software handles image data...

PT-2019-9188

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.5 Description The issue concerns a Read Access Violation on Block Data Move, which can be triggered by a crafted image file. This suggests a potential problem with how the software handles image data...

CVE-2018-15814: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via a crafted image file...

CVE-2018-15816: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file...

CVE-2018-15813: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237 via a crafted image file...

CVE-2018-15815: Improper Check for Unusual or Exceptional Conditions

FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a via a crafted image file...

CVE-2018-15817: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file...

Xpdf PE Vulnerability (CNVD-2019-22438)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An FPE vulnerability exists in the ImageStream::ImageStream function in Stream.cc in Xpdf 4.01.01. No detailed vulnerability details are provided at this time...

XnView MP Denial of Service Vulnerability (CNVD-2019-12191)

XnView MP is a suite of image viewing software that is an enhanced version of XnView Classic. The software can be used to view, convert, organize and edit graphics and video files. A security vulnerability exists in XnView MP version 0.93.1 Windows. A remote attacker can exploit this vulnerabilit...

@jpmorganchase/perspective-viewer-highcharts (>=0.1.7, <=0.1.13), angular-universe (>=0.0.1, <=0.0.2) +3 more potentially affected by CVE-2018-20801 via highcharts (>=6.0.1, <=6.0.7)

highcharts NPM version =6.0.1, =0.1.7, =0.0.1, =1.1.0, =2.1.0 - web-platform-library 0.0.2 - zeppelin-highmaps 1.0.0 Source cves: CVE-2018-20801 Source advisory: OSV:GHSA-XMC8-CJFR-PHX3...

Microsoft Windows Multiple Vulnerabilities (KB4489878)

This host is missing a critical security update according to Microsoft KB4489878 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

March 12, 2019—KB4489891 (Monthly Rollup)

None None...

March 12, 2019—KB4489884 (Security-only update)

None None...

Rockstar Games: image injection /screenshot-viewer/responsive/image (ANOTHER FIX BYPASS)

In this report, the researcher was able to identify an oversight in our input filtering put in place to fix previous findings in the screenshot-viewer utility on the main website. Thanks to this report, we were able to improve our solution to prevent bypasses such as this one...

Denial of service vulnerability in Viscom Softwares pdf viewer activex control

Viscom Softwares pdf viewer activex control is a popular PDF viewing and printing control. A denial of service vulnerability exists in the Viscom Softwares pdf viewer activex control. An attacker can exploit this vulnerability to cause a denial of service by constructing a specific pdf file...

PT-2019-19729 · Foxtan +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01 Description: The issue is related to an invalid memory access in the gAtomicIncrement function, located in GMutex.h. This can be triggered by sending a crafted pdf file to the pdftops binary, for example. The impact of this...

Rockstar Games: Image injection on /screenshot-viewer/responsive/image ( FIX BYPASS)

In this report, the researcher identified an image injection issue in the screenshot-viewer utility on our website that could be combined with other vulnerabilities to result in sensitive token theft. We were able to quickly push out an update to resolve the image injection issue, thereby...

[SECURITY] Fedora 29 Update: mgetty-1.1.37-11.fc29

The mgetty package contains a "smart" getty which allows logins over a serial line i.e., through a modem. If you're using a Class 2 or 2.0 modem, mgetty can receive faxes. If you also need to send faxes, you'll need to install the sendfax program. If you'll be dialing in to your system using a...

RAW image plugin Microsoft Windows Code Execution

The vulnerability of the plugin for viewing RAW images in Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted request...

Rockstar Games: Image Injection on www.rockstargames.com/screenshot-viewer/responsive/image may allow facebook oauth token theft.

In this report, the researcher identified an image injection vulnerability in our screenshot-viewer utility on rockstargames.com. One of the input parameters utilized was not being properly filtered, and external URLs could be referenced, allowing off-site images to be called. This issue was...