Lucene search
+L

6824 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/03/23 12:00 a.m.23 views

Adobe Acrobat Pro DC TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.5CVSS2AI score0.10792EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/23 12:00 a.m.9 views

UBUNTU-CVE-2018-8960

The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read...

8.8CVSS6.9AI score0.04246EPSS
SaveExploits1References3
OSV
OSV
added 2018/03/22 4:29 a.m.37 views

CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

8.8CVSS6.2AI score
SaveExploits0References9
OSV
OSV
added 2018/03/22 4:29 a.m.8 views

DEBIAN-CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

8.8CVSS6.7AI score0.03077EPSS
SaveExploits1References1
OSV
OSV
added 2018/03/22 4:29 a.m.8 views

ALPINE-CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

8.8CVSS7.4AI score0.03077EPSS
SaveExploits1References1
Prion
Prion
added 2018/03/22 4:29 a.m.30 views

Heap overflow

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

6.8CVSS8.5AI score0.03077EPSS
SaveExploits1References9Affected Software6
NVD
NVD
added 2018/03/22 4:29 a.m.17 views

CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

8.8CVSS8.6AI score0.03077EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2018/03/22 4:29 a.m.66 views

CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

8.8CVSS5.8AI score0.03077EPSS
SaveExploits1References11
Debian CVE
Debian CVE
added 2018/03/22 4:00 a.m.38 views

CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

8.8CVSS7.1AI score0.03077EPSS
SaveExploits1
Cvelist
Cvelist
added 2018/03/22 4:00 a.m.32 views

CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

8.8AI score0.03077EPSS
SaveExploits1References9
OSV
OSV
added 2018/03/22 12:00 a.m.6 views

UBUNTU-CVE-2018-8905

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tiflzw.c via a crafted TIFF file, as demonstrated by tiff2ps...

8.8CVSS7AI score0.03077EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2018/03/21 12:00 a.m.53 views

Ubuntu: Security Advisory (USN-3602-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.07482EPSS
SaveExploits15References2
Ubuntu
Ubuntu
added 2018/03/20 5:20 p.m.78 views

USN-3602-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

8.8CVSS7.2AI score0.07482EPSS
SaveExploits15
OSV
OSV
added 2018/03/20 5:20 p.m.13 views

USN-3602-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

8.8CVSS7.1AI score0.07482EPSS
SaveExploits15References28
Tenable Nessus
Tenable Nessus
added 2018/03/19 12:00 a.m.29 views

openSUSE Security Update : exempi (openSUSE-2018-282)

This update for exempi fixes the following issues : - CVE-2018-7728: Specially crafted TIFF images could have been used to cause a denial of service via a heap-based buffer overflow boo1085297 - CVE-2018-7730: Specially crafted Excel files could have been used cause a denial of service via a...

5.5CVSS5.8AI score0.01398EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2018/03/18 12:00 a.m.6 views

PT-2019-4925 · Gnome +4 · Evince +4

Name of the Vulnerable Software and Affected Versions: Evince version 3.26.0 Description: The issue is caused by a buffer overflow in the backend/tiff/tiff-document.c component of the Evince document viewer. This can be exploited by a remote attacker using a specially crafted PDF file, potentiall...

9.6CVSS6.8AI score0.51076EPSS
SaveExploits14References74
Prion
Prion
added 2018/03/15 7:29 p.m.28 views

Design/Logic Flaw

An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service invalid memcpy with resultant use-after-free or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp,...

6.8CVSS7.9AI score0.01649EPSS
SaveExploits1References5Affected Software3
RedhatCVE
RedhatCVE
added 2018/03/14 4:21 a.m.33 views

CVE-2018-7728

An out-of-bounds read vulnerability has been discovered in Exempi in the way it handles Extensible Metadata Platform XMP data in TIFF images. An attacker could cause a denial of service by convincing a user to open a crafted TIFF image file...

5.5CVSS2.8AI score0.0132EPSS
SaveExploits1References1
NVD
NVD
added 2018/03/14 2:29 a.m.26 views

CVE-2017-18229

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

6.5CVSS6.9AI score0.02271EPSS
SaveExploits1References6
OSV
OSV
added 2018/03/14 2:29 a.m.6 views

UBUNTU-CVE-2017-18229

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

6.5CVSS6.6AI score0.02271EPSS
SaveExploits1References5
Rows per page
Query Builder