Lucene search
+L

125 matches found

OSV
OSV
added 2018/11/22 4:29 p.m.5 views

SUSE-SU-2018:3861-1 Security update for SDL_image

This update for SDLimage fixes the following issues: Security issue fixed: - CVE-2018-3977: Fixed a heap overflow issue bsc1114519...

8.8CVSS8.8AI score0.03479EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2018/11/15 12:00 a.m.42 views

Fedora Update for mingw-SDL2_image FEDORA-2018-e8d19367cb

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.03479EPSS
SaveExploits3References2
UbuntuCve
UbuntuCve
added 2018/11/01 3:29 p.m.32 views

CVE-2018-3977

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS7.5AI score0.03479EPSS
SaveExploits1References4
OSV
OSV
added 2018/11/01 3:29 p.m.9 views

CVE-2018-3977

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS8.8AI score
SaveExploits0References5
Cvelist
Cvelist
added 2018/11/01 3:00 p.m.41 views

CVE-2018-3977

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS8.7AI score0.03479EPSS
SaveExploits1References5
CVE
CVE
added 2018/11/01 3:00 p.m.107 views

CVE-2018-3977

CVE-2018-3977 is an exploitable heap overflow in the SDL2_image library’s XCF image handling (IMG_xcf.c) that can lead to remote code execution when processing a crafted XCF image. The vulnerability affects SDL2_image versions around 2.0.3 and was addressed in multiple vendor advisories, with Deb...

8.8CVSS8.6AI score0.03479EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
added 2018/11/01 3:00 p.m.55 views

CVE-2018-3977

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS8.9AI score0.03479EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 1:32 a.m.25 views

Security Bulletin: IBM Flex System Manager (FSM) is affected by a giflib vulnerability (CVE-2016-3977)

Summary A security vulnerability has been discovered in giflib that is embedded in the IBM FSM. This bulletin addresses this vulnerability Vulnerability Details CVEID: CVE-2016-3977 DESCRIPTION: giflib is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by...

5.5CVSS1.4AI score0.02113EPSS
SaveExploits0Affected Software1
Circl
Circl
added 2018/05/29 3:50 p.m.21 views

CVE-2013-3977

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ibmsametimeroombrute.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:19+00:00| seen|...

4.3CVSS5.7AI score0.09048EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2018/03/16 2:04 p.m.9 views

CVE-2017-3977

...

SaveExploits0
CVE
CVE
added 2018/03/16 2:04 p.m.26 views

CVE-2017-3977

CVE-2017-3977 has been rejected and is not an active vulnerability entry.

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/09/19 12:00 a.m.33 views

Debian DSA-3977-1 : newsbeuter - security update

It was discovered that podbeuter, the podcast fetcher in newsbeuter, a text-mode RSS feed reader, did not properly escape the name of the media enclosure the podcast file, allowing a remote attacker to run an arbitrary shell command on the client machine. This is only exploitable if the file is...

8.8CVSS8AI score0.03078EPSS
SaveExploits0References5
Mageia
Mageia
added 2016/11/26 10:41 a.m.41 views

Updated giflib packages fix security vulnerability

A heap buffer overflow vulnerability was found in giflib. A maliciously crafted gif file could cause the gif2rgb tool to crash CVE-2016-3977...

5.5CVSS2.2AI score0.02113EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2016/05/05 12:00 a.m.32 views

openSUSE Security Update : giflib (openSUSE-2016-556)

giflib was updated to fix one security issue. This security issue was fixed : - CVE-2016-3977: Heap buffer overflow in gif2rgb bsc974847. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

5.5CVSS6.3AI score0.02113EPSS
SaveExploits0References2
OSV
OSV
added 2016/04/21 2:59 p.m.7 views

CVE-2016-3977

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash via the background color index in a GIF file...

5.5CVSS5.8AI score
SaveExploits0References9
CVE
CVE
added 2016/04/21 2:00 p.m.101 views

CVE-2016-3977

CVE-2016-3977 is a heap-based buffer overflow in util/gif2rgb.c of giflib 5.1.2. The vulnerability allows a remote attacker to cause an application crash (DoS) by supplying a GIF with a crafted background color index. Connected documents confirm the issue in giflib 5.1.2 and describe the impact a...

5.5CVSS5.6AI score0.02113EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/04/21 12:00 a.m.27 views

openSUSE Security Update : giflib (openSUSE-2016-497)

This update fixes the following issue : Heap buffer overflow in gif2rgb CVE-2016-3977 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-497. The text description of this plugin is ...

5.5CVSS6AI score0.02113EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2016/04/21 12:00 a.m.25 views

CVE-2016-3977

Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash via the background color index in a GIF file...

5.5CVSS6.7AI score0.02113EPSS
SaveExploits0References2
CVE
CVE
added 2015/11/15 2:00 a.m.59 views

CVE-2015-3977

CVE-2015-3977 pertains to a buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM (HART Protocol) prior to version 1.500.004. The vulnerability arises from an improper handling of input in the DTM library, allowing a crafted HART reply to overwrite memory, which could lead to memory corru...

7.7CVSS7.9AI score0.01079EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/08/26 12:00 a.m.32 views

AIX 7.1 TL 2 : bos.rte.odm (U865302)

The remote host is missing AIX PTF U865302, which is related to the security of the package bos.rte.odm. AIX could allow a arbitrary file overwrite symlink vulnerability due to libodm.a bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

6.9CVSS5.7AI score0.01748EPSS
SaveExploits5References3
Rows per page
Query Builder