Lucene search
+L

6824 matches found

CNVD
CNVD
added 2018/04/24 12:00 a.m.5 views

Denial of Service Vulnerability in WPS Office ocr Module

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A denial-of-service vulnerability exists in WPS OFFICE's OCR module Image to Text when...

6.8AI score
SaveExploits0
OSV
OSV
added 2018/04/21 9:29 p.m.10 views

UBUNTU-CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

6.5CVSS6.5AI score0.01841EPSS
SaveExploits1References2
OSV
OSV
added 2018/04/21 9:29 p.m.14 views

DEBIAN-CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

6.5CVSS6.9AI score0.01841EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2018/04/21 12:00 a.m.8 views

PT-2018-9697 · Ijg +2 · Ijg-Libjpeg +2

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.0.9 ijg-libjpeg versions prior to 9d Description: The issue is related to a NULL pointer dereference in the jpeg fdct 16x16 function in jfdctint.c. This problem occurs because the code does not check for a NULL pointer at a...

6.5CVSS8.8AI score0.01841EPSS
SaveExploits1References13
Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:00 a.m.39 views

Foxit Reader TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIFF...

8.8CVSS5.4AI score0.03185EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/19 12:00 a.m.40 views

Exiv2 BigTiffImage::printIFD single-byte overflow vulnerability

Exiv2 is a C++ class library for extracting EXIF, LPTC and XMP metadata information from images. A single-byte overflow security vulnerability exists in Exiv2 version 0.26 bigtiffimage.cpp/BigTiffImage::printIFD, which can be exploited by an attacker to cause a denial of service...

6.5CVSS6.9AI score0.01679EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/04/19 12:00 a.m.23 views

Exiv2 BigTiffImage::readData Assertion Failure Vulnerability

Exiv2 is a C++ library for extracting EXIF, LPTC and XMP metadata information from images. An assertion failure security vulnerability exists in Exiv2 version 0.26 bigtiffimage.cpp/BigTiffImage::readData, which can be exploited by an attacker to cause a service interruption...

6.5CVSS6.7AI score0.0137EPSS
SaveExploits1References1
Debian
Debian
added 2018/04/16 2:34 a.m.44 views

[SECURITY] [DLA 1346-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u19 CVE ID : CVE-2018-7456 Debian Bug : 891288 A NULL Pointer Dereference was discovered in the TIFFPrintDirectory function tifprint.c when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to...

6.5CVSS8.2AI score0.02989EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2018/04/16 12:00 a.m.45 views

Debian DLA-1346-1 : tiff security update

A NULL pointer Dereference was discovered in the TIFFPrintDirectory function tifprint.c when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to cause a crash of the application. For Debian 7 'Wheezy', these problems have been...

6.5CVSS6.4AI score0.02989EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2018/04/16 12:00 a.m.44 views

Microsoft Office: Suppress hyperlink warnings

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013hyperlinkwarnings.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Suppress hyperlink warnings Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program ...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/04/15 12:00 a.m.28 views

Debian: Security Advisory (DLA-1346-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.9AI score0.02989EPSS
SaveExploits1References3
OSV
OSV
added 2018/04/15 12:00 a.m.43 views

DLA-1346-1 tiff - security update

Bulletin has no description...

6.5CVSS6.7AI score0.02989EPSS
SaveExploits1
Veracode
Veracode
added 2018/04/13 3:25 a.m.27 views

Denial Of Service (DoS) Through Memory Leak

libtiff.so is vulnerable to denial of service DoS through memory leak. The vulnerability exists as was not freed in the JBGEOK != decodeStatus branch found in the JBIGDecode function of tifjbig.c, allowing a malicious TIFF document to cause denial of service DoS when it is processed...

6.5CVSS5AI score0.07482EPSS
SaveExploits3References6Affected Software2
CNVD
CNVD
added 2018/04/13 12:00 a.m.11 views

Computerinsel Photoline TIFF parsing function memory corruption vulnerability (CNVD-2018-08685)

PhotoLine is a multipurpose image and graphics editor. A memory corruption vulnerability exists in the TIFF parsing feature in Computerinsel Photoline 20.53. An attacker can exploit this vulnerability to cause out-of-bounds writes and overwrite arbitrary data via specially crafted TIFF images,...

8.8CVSS7.7AI score0.01478EPSS
SaveExploits1References1
OSV
OSV
added 2018/04/12 7:29 p.m.11 views

CVE-2018-3861

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

7.8CVSS6AI score0.01478EPSS
SaveExploits1References1
NVD
NVD
added 2018/04/12 7:29 p.m.27 views

CVE-2018-3862

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

8.8CVSS7.9AI score0.0102EPSS
SaveExploits1References1
NVD
NVD
added 2018/04/12 7:29 p.m.23 views

CVE-2018-3868

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

8.8CVSS8.2AI score0.01252EPSS
SaveExploits0References1
Prion
Prion
added 2018/04/12 7:29 p.m.19 views

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

6.8CVSS7.8AI score0.01252EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2018/04/12 7:29 p.m.24 views

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

6.8CVSS7.8AI score0.01478EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2018/04/12 7:29 p.m.18 views

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

6.8CVSS7.5AI score0.0102EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder