CVE-2018-11707

FastStone Image Viewer 6.2 is affected by a vulnerability in FSViewer.exe where a malformed JPEG causes a User-Mode Read/Execute access violation at 0x0057898e. Root cause: improper handling of certain JPEG input leads to memory error when the user opens the file. Impact: Denial of Service via cr...

CVE-2018-11706

CVE-2018-11706 affects FastStone Image Viewer 6.2. The vulnerability arises in the FSViewer.exe handling of malformed JPEG files, causing a User Mode Write Access Violation that can trigger a denial of service (and possibly other impacts) when the image is opened. Technical details in the provide...

CVE-2018-11705

FastStone Image Viewer 6.2 contains a vulnerability in FSViewer.exe where handling a malformed JPEG file can trigger a User Mode Write AV at 0x00578cc4, leading to a DoS (Access Violation) and potentially other impact. The issue is triggered by processing the malformed JPEG, with local attack con...

CVE-2018-11701

FastStone Image Viewer 6.2 (FSViewer.exe) is affected by a User Mode Write AV at 0x005cb509 when opening a malformed JPEG file mishandled by the application. The issue arises from how JPEGs are processed, enabling potential DoS (Access Violation) and possibly other impacts. The vulnerability deta...

CVE-2018-11707

FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

CVE-2018-11704

CVE-2018-11704 affects FastStone Image Viewer 6.2. The vulnerability arises in FSViewer.exe from a User Mode write at 0x00402d7d when a malformed JPEG is opened, leading to a potential denial of service (Access Violation) and possibly other impacts. This is documented across multiple sources (NVD...

CVE-2018-11703

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

CVE-2018-11703

CVE-2018-11703 affects FastStone Image Viewer 6.2. The vulnerability is a User Mode Write Access Violation triggered by processing a malformed JPEG file that is mishandled by FSViewer.exe, allowing an attacker to cause a denial of service (Access Violation) and potentially other impacts. The issu...

CVE-2018-11705

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

CVE-2018-11704

FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

Security Bulletin: Log Viewer vulnerability affects IBM Workload Deployer, which is shipped with IBM SmartCloud Orchestrator (CVE-2014-6190)

Summary Log Viewer vulnerability affects IBM Workload Deployer, which is shipped with IBM SmartCloud Orchestrator CVE-2014-6190. Vulnerability Details For vulnerability details, see the IBM Workload Deployer Security Bulletin. Affected Products and Versions IBM SmartCloud Orchestrator 2.2 and 2.2...

Security Bulletin: IBM Tivoli Application Dependency Discovery Manager (TADDM) can reveal TADDM database sensitive information (CVE-2014-6148)

Summary IBM Tivoli Application Dependency Discovery Manager contains a vulnerability that would allow an attacker to steal sensitive information to access TADDM database. Vulnerability Details CVE ID: CVE-2014-6148 DESCRIPTION: An attacker can use a specially-crafted URL to steal sensitive TADDM...

Security Bulletin: Vulnerabilities in BIRT-viewer embedded in IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2014-6149)

Summary There are vulnerabilities in BIRT-viewer embedded in TADDM that cannot be fixed, so there is a need to disable BIRT-viewer in TADDM. For secure use of BIRT reports in TADDM there is a need to use Tivoli Common Reporting TCR where TADDM BIRT reports can be migrated. Vulnerability Details C...

Security Bulletin: TADDM – Security improvement: BIRT-Report Viewer application vulnerable to directory traversal attack.

Summary TADDM security improvement deployed started from TADDM 7.2.1.5 and in TADDM 7.2.2 avoids vulnerability in embedded TADDM BIRT-Report Viewer application. Vulnerability Details CVE-2013-3004 Description Embedded in TADDM BIRT-Report Viewer application component was found to be vulnerable to...

Security Bulletin: TADDM - BIRT viewer allow bypass authorization

Summary TADDM fails to properly check for authorization when allowing a user to view BIRT reports. It is possible to bypass authorization in the application via parameters manipulation in the BIRT reporting URL. Vulnerability Details CVE-2013-2974 BIRT viewer allow bypass authorization Descriptio...

Security Bulletin: IBM Forms Viewer may be affected by an Apache Xerces-C XML Parser library vulnerability (CVE-2016-0729, CVE-2016-4463)

Summary An IBM Form XFDL document that contains a specially crafted mark-up could crash IBM Forms Viewer. This may expose a vulnerability in its use of the Apache Xerces-C XML Parser library. Vulnerability Details CVEID: CVE-2016-0729 DESCRIPTION: Apache Xerces-C XML Parser library is vulnerable ...

Security Bulletin: IBM Forms Viewer Installation could allow a remote attacker to execute arbitrary code on the system (CVE-2016-2542)

Summary IBM Forms Viewer Installation could allow a remote attacker to execute arbitrary code on the system. If you have recently downloaded a copy of IBM Forms Viewer, use the information below to correct the vulnerability prior to installing the product. If you have already installed IBM...

Security Bulletin: IBM Forms Viewer may be affected by a known issue with libpng library (CVE-2015-8126, CVE-2015-8472)

Summary An IBM Form XFDL document that contains a specially crafted PNG image can crash IBM Forms Viewer. This can occur based on the Viewer's use of this library. Vulnerability Details CVEID: CVE-2015-8126 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by improper bounds checking...

Security Bulletin: IBM Forms Viewer can crash on some embedded PNG images (CVE-2013-6954)

Summary A XFDL form with a PNG image that exposes this issue can crash the IBM Forms Viewer Vulnerability Details CVEID: CVE-2013-6954 DESCRIPTION: A XFDL form can be created utilizing a specially created PNG image that could result in the IBM Forms Viewer to crash. CVSS Base Score: 4.3 CVSS...

Security Bulletin: Multiple vulnerabilities in IBM SDK for Java included with IBM Forms Viewer

Summary Multiple security vulnerabilities exist in the IBM SDK for Java that is included with several installations of the IBM Forms Viewer. Vulnerability Details The IBM Forms Viewer includes installers that bundle and use the IBM SDK for Java. This version of Java includes multiple...