UBUNTU-CVE-2019-12921

In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG...

CVE-2019-12921

GraphicsMagick (before 1.3.32) is affected by CVE-2019-12921 where the text filename component could read arbitrary files via TranslateTextEx in SVG processing. OpenSUSE and Debian advisories explicitly reference CVE-2019-12921 alongside CVE-2020-10938, with patches to fix the issues (e.g., updat...

CVE-2019-12921

In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG...

CVE-2018-12921

Electro Industries GaugeTech Nexus devices are affected by an information-disclosure vulnerability (CVE-2018-12921). An attacker can remotely request specific URIs (meter_information.htm, diag_system.htm, or diag_dnp_lan_wan.htm) to obtain potentially sensitive information. The issue is documente...

CVE-2017-12921

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12921

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12921

CVE-2017-12921 affects the libfpx library (version 1.3.1_p6). The vulnerability is in PFileFlashPixView::GetGlobalInfoProperty (f_fpxvw.cpp) and allows remote attackers to cause a denial of service via a crafted FPX image, caused by a NULL pointer dereference. Public sources document the conditio...