6811 matches found
FFmpeg 代码问题漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 4.3, which stems from a flaw in the decodeframe function in the libavcodec/tiff.c file. No details of the vulnerability are available at th...
CVE-2021-28427
Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file...
CVE-2021-28427
Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file...
CVE-2021-28427
CVE-2021-28427 affects XNView 2.49.3 with a buffer overflow in TIFF handling, enabling local attackers to execute arbitrary code via a crafted TIFF file. remediation: update to a fixed version (per PT-2023-12127) or apply vendor guidance; as a temporary workaround, avoid using crafted TIFF files....
Siemens JT2Go < 14.2.0.5 Multiple Vulnerabilities (SSA-131450)
The version of Siemens JT2Go installed on the remote Windows hosts is prior to 14.2.0.5. It is, therefore, affected by multiple vulnerabilities: - Use-after-free vulnerability that can be triggered while parsing a specially crafted ASM file. An attacker can leverage this vulnerability to execute...
ImageMagick < 6.9.12-93 / 7.1.1.0 < 7.1.1-15 Buffer Overflow Condition
The remote Windows host has a version of ImageMagick installed that is prior to 6.9.12-26 or 7.1.1-0 before 7.1.1-11. It is, therefore, affected by a buffer overflow condition in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious...
CVE-2023-38683
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...
CVE-2023-38683
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...
CVE-2023-38682
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected applications contain an out of bounds read past...
Design/Logic Flaw
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...
Out-of-bounds
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected applications contain an out of bounds read past...
CVE-2023-38683
The CVE-2023-38683 entry concerns Siemens JT2Go and Teamcenter Visualization. Affected products are JT2Go (all versions before 14.2.0.5) and Teamcenter Visualization (V13.2 before 13.2.0.14, V14.1 before 14.1.0.10, V14.2 before 14.2.0.5). The vulnerability is an out-of-bounds write past the end o...
CVE-2023-38683
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...
CVE-2023-38683
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected application contains an out of bounds write past...
CVE-2023-38682
Siemens JT2Go and Teamcenter Visualization are affected by an out-of-bounds read vulnerability (CVE-2023-38682) when parsing specially crafted TIFF files. Affected products/versions include JT2Go < 14.2.0.5 and Teamcenter Visualization: V13.2 < 13.2.0.14, V14.1 < 14.1.0.10, and V14.2
CVE-2023-38682
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected applications contain an out of bounds read past...
CVE-2023-38682
A vulnerability has been identified in JT2Go All versions V14.2.0.5, Teamcenter Visualization V13.2 All versions V13.2.0.14, Teamcenter Visualization V14.1 All versions V14.1.0.10, Teamcenter Visualization V14.2 All versions V14.2.0.5. The affected applications contain an out of bounds read past...
EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2023-2587)
According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. CVE-2023-26965 Note that Tenabl...
CVE-2023-29408
A flaw was found in the Golang tiff package, where it is vulnerable to a denial of service caused by not limiting the size of compressed tile data. By persuading a victim to open a specially crafted image file, a remote attacker can cause excessive memory and CPU consumption in decoding, resultin...
CVE-2023-29407
A flaw was found in the Golang tiff package, where it is vulnerable to a denial of service caused by an excessive iteration flaw. By persuading a victim to open a specially crafted image file, a remote attacker can cause excessive CPU consumption in decoding, resulting in a denial of service...