Lucene search
+L

6815 matches found

Cvelist
Cvelist
added 2021/11/10 9:26 p.m.34 views

CVE-2020-23893

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

5.3AI score0.00726EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/11/10 9:26 p.m.39 views

CVE-2020-23891

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

5.3AI score0.00664EPSS
SaveExploits1References2
CVE
CVE
added 2021/11/10 9:26 p.m.49 views

CVE-2020-23891

Summary: CVE-2020-23891 affects WildBit Viewer 6.6, with a vulnerability in the Editor+0x5cd7 path that allows a user-mode write condition to trigger a denial of service when handling specially crafted TIFF files. The issue is described in multiple sources (e.g., CNVD, Red Hat, NVD). The exact ro...

5.5CVSS5.3AI score0.00664EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.9 views

WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor. A buffer overflow vulnerability exists in Editor+0x76af in WildBit Viewer version 6.6, which can be exploited by an attacker to cause a denial of service via a specially crafted tiff file...

5.5CVSS6AI score0.00664EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.13 views

WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor. A buffer overflow vulnerability exists in ntdll!RtlpCoalesceFreeBlocks+0x268 in WildBit Viewer version 6.6, which can be exploited by an attacker to cause a denial of service via a specially crafted tiff file...

5.5CVSS6AI score0.00563EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2021/11/09 5:42 p.m.10 views

python-pillow: Negative-offset memcpy in TIFF image reader

A flaw was found in python-pillow. In TiffDecode.c, there is a negative-offset memcpy with an invalid size which could lead to a system crash...

7.5CVSS7.3AI score0.02372EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/11/09 5:36 p.m.11 views

libtiff: Heap-based buffer overflow in TIFF2PDF tool

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS7.8AI score0.01851EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2021/11/09 5:36 p.m.7 views

libtiff: Memory allocation failure in tiff2rgba

In LibTIFF, there is a memory malloc failure in tifpixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack...

5.5CVSS7.4AI score0.01574EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2021/11/09 8:50 a.m.77 views

Moderate: libtiff security and bug fix update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Integer overflow in tifgetimage.c CVE-2020-35523 libtiff: Heap-based buffer overflow in TIFF2PDF tool CVE-2020-35524 libtiff: Memory allocation failure in tiff2rgba...

7.8CVSS7.4AI score0.01922EPSS
SaveExploits0References4
NVD
NVD
added 2021/11/05 12:15 a.m.22 views

CVE-2021-39912

A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to trigger memory exhaustion...

5.3CVSS0.01484EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/11/05 12:15 a.m.7 views

CVE-2021-39912

A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to trigger memory exhaustion...

5.3CVSS6AI score0.01484EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2021/11/05 12:15 a.m.25 views

Memory corruption

A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to trigger memory exhaustion...

5CVSS5AI score0.01484EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2021/11/05 12:15 a.m.20 views

CVE-2021-39912

A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to trigger memory exhaustion...

5.3CVSS6.1AI score0.01484EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/11/04 11:05 p.m.28 views

CVE-2021-39912

A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to trigger memory exhaustion...

5.3CVSS5.6AI score0.01484EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2021/11/04 11:05 p.m.45 views

CVE-2021-39912

Removed by vendor...

5.3CVSS6AI score0.01484EPSS
SaveExploits0
CVE
CVE
added 2021/11/04 11:05 p.m.82 views

CVE-2021-39912

CVE-2021-39912 describes a potential DoS in GitLab CE/EE starting with version 13.7, triggered by malformed TIFF images that can cause memory exhaustion. The evidence across connected sources consistently identifies the affected product as GitLab CE/EE and the root cause as processing malformed T...

5.3CVSS5AI score0.01484EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2021/11/03 6:04 p.m.40 views

Integer overflow in Pillow

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS8.9AI score0.01975EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/11/03 6:04 p.m.8 views

GHSA-VCQG-3P29-XW73 Integer overflow in Pillow

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

9.3CVSS6.8AI score0.01975EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2021/11/01 12:00 a.m.16 views

Debian: Security Advisory (DSA-4997-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.01456EPSS
SaveExploits0References4
Debian
Debian
added 2021/10/31 2:57 p.m.101 views

[SECURITY] [DSA 4997-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4997-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2021 https://www.debian.org/security/faq -...

6.5CVSS6.9AI score0.01456EPSS
SaveExploits0
Rows per page
Query Builder