PT-2018-10760

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2 Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Write AV at memory address 0x005cb509 due to mishandling by FSViewer.exe. This could lead to a Denial of Service DoS...

CVE-2018-11705: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

PT-2018-10766

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2 Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Read and Execute AV at memory address 0x0057898e due to mishandling by FSViewer.exe. This could lead to a Denial of Servi...

CVE-2018-11703: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

PT-2018-10762

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2 Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Write AV at 0x00402d6a due to mishandling by FSViewer.exe. This could lead to a Denial of Service DoS through an Access...

PT-2018-10761

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2 Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Write AV at memory address 0x00578cb3 due to mishandling by FSViewer.exe. This could lead to a Denial of Service DoS...

PT-2018-10765

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2 Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Write AV at memory address 0x00578dd8 due to mishandling by FSViewer.exe. This could lead to a Denial of Service DoS...

CVE-2018-11704: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

PT-2018-10763

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2 Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Write AV at memory address 0x00402d7d due to mishandling by FSViewer.exe. This could lead to a Denial of Service DoS...

CVE-2018-11706: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

PT-2018-10764

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer version 6.2 Description The issue occurs when a malformed JPEG file is opened, causing a User Mode Write AV at memory address 0x00578cc4 due to mishandling by FSViewer.exe. This could potentially be exploited for a Denia...

Security Bulletin: Log Viewer vulnerability affects IBM Workload Deployer, which is shipped with IBM SmartCloud Orchestrator (CVE-2014-6190)

Summary Log Viewer vulnerability affects IBM Workload Deployer, which is shipped with IBM SmartCloud Orchestrator CVE-2014-6190. Vulnerability Details For vulnerability details, see the IBM Workload Deployer Security Bulletin. Affected Products and Versions IBM SmartCloud Orchestrator 2.2 and 2.2...

Security Bulletin: IBM Tivoli Application Dependency Discovery Manager (TADDM) can reveal TADDM database sensitive information (CVE-2014-6148)

Summary IBM Tivoli Application Dependency Discovery Manager contains a vulnerability that would allow an attacker to steal sensitive information to access TADDM database. Vulnerability Details CVE ID: CVE-2014-6148 DESCRIPTION: An attacker can use a specially-crafted URL to steal sensitive TADDM...

Security Bulletin: Vulnerabilities in BIRT-viewer embedded in IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2014-6149)

Summary There are vulnerabilities in BIRT-viewer embedded in TADDM that cannot be fixed, so there is a need to disable BIRT-viewer in TADDM. For secure use of BIRT reports in TADDM there is a need to use Tivoli Common Reporting TCR where TADDM BIRT reports can be migrated. Vulnerability Details C...

Security Bulletin: TADDM – Security improvement: BIRT-Report Viewer application vulnerable to directory traversal attack.

Summary TADDM security improvement deployed started from TADDM 7.2.1.5 and in TADDM 7.2.2 avoids vulnerability in embedded TADDM BIRT-Report Viewer application. Vulnerability Details CVE-2013-3004 Description Embedded in TADDM BIRT-Report Viewer application component was found to be vulnerable to...

Security Bulletin: TADDM - BIRT viewer allow bypass authorization

Summary TADDM fails to properly check for authorization when allowing a user to view BIRT reports. It is possible to bypass authorization in the application via parameters manipulation in the BIRT reporting URL. Vulnerability Details CVE-2013-2974 BIRT viewer allow bypass authorization Descriptio...

Security Bulletin: IBM Forms Viewer may be affected by an Apache Xerces-C XML Parser library vulnerability (CVE-2016-0729, CVE-2016-4463)

Summary An IBM Form XFDL document that contains a specially crafted mark-up could crash IBM Forms Viewer. This may expose a vulnerability in its use of the Apache Xerces-C XML Parser library. Vulnerability Details CVEID: CVE-2016-0729 DESCRIPTION: Apache Xerces-C XML Parser library is vulnerable ...

Security Bulletin: IBM Forms Viewer Installation could allow a remote attacker to execute arbitrary code on the system (CVE-2016-2542)

Summary IBM Forms Viewer Installation could allow a remote attacker to execute arbitrary code on the system. If you have recently downloaded a copy of IBM Forms Viewer, use the information below to correct the vulnerability prior to installing the product. If you have already installed IBM...

Security Bulletin: IBM Forms Viewer may be affected by a known issue with libpng library (CVE-2015-8126, CVE-2015-8472)

Summary An IBM Form XFDL document that contains a specially crafted PNG image can crash IBM Forms Viewer. This can occur based on the Viewer's use of this library. Vulnerability Details CVEID: CVE-2015-8126 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by improper bounds checking...

Security Bulletin: IBM Forms Viewer can crash on some embedded PNG images (CVE-2013-6954)

Summary A XFDL form with a PNG image that exposes this issue can crash the IBM Forms Viewer Vulnerability Details CVEID: CVE-2013-6954 DESCRIPTION: A XFDL form can be created utilizing a specially created PNG image that could result in the IBM Forms Viewer to crash. CVSS Base Score: 4.3 CVSS...