image processing project image processing - vulnerabilities and exploits

(subscribe to this query)

2.1

CVSSv2

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image.

Image Processing Project Image Processing -

4.3

CVSSv2

An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local malicious users to cause a denial of service via a crafted image file.

Image-processing Project Image-processing 0.1.0

5

CVSSv2

The deferred_image_processing (aka Deferred image processing) extension prior to 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption.

Deferred Image Processing Project Deferred Image Processing

10

CVSSv2

image_processing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the `#apply` method from image_processing to apply a series of operations that are coming from unsanitized user input allows the malicious user to execute sh...

Image Processing Project Image Processing Debian Debian Linux 11.0

7.5

CVSSv2

Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image prior to 1.2.7 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these det...

Sdl Sdl Image

1 EDB exploit

10

CVSSv2

Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c in SDL_image prior to 1.2.7 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted IFF ILBM file. NOTE: some of these details are obtain...

Sdl Sdl Image 1.2.6

9.3

CVSSv2

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote malicious users to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length ...

6 EDB exploits

6.8

CVSSv2

Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are...

Libexif Project Libexif 0.6.18

9.3

CVSSv2

Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG prior to 0.7.6 allows remote malicious users to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file.

Optipng Project Optipng Canonical Ubuntu Linux 12.04 Debian Debian Linux 8.0 Debian Debian Linux 7.0 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 14.04

4.3

CVSSv2

gifread.c in gif2png, as used in OptiPNG prior to 0.7.6, allows remote malicious users to cause a denial of service (uninitialized memory read) via a crafted GIF file.

Optipng Project Optipng 0.7.5 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook