Lucene search
+L

2495 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/04/20 12:0 a.m.25 views

Foxit Reader BMP Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

6.8CVSS5.6AI score0.03185EPSS
SaveExploits0References1
Veracode
Veracode
added 2018/04/18 3:44 a.m.22 views

Denial Of Service (DoS) Via Out-of-bounds(OOB) Read

libtiff.so is vulnerable to denial of serviceDoS attacks. The LZW encoding in tiflzw.c allows to input a malicious bmp image with parameter: -c lzw, leading to an out-of-bounds read...

8.8CVSS8.7AI score0.02097EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2018/04/16 12:0 a.m.4 views

Denial of Service Vulnerability in Good Photo Image Processing Software for Processing BMP Images

Good Photo is a multi-platform professional-grade image processing software developed by Chengdu Hengtu Technology Co. A memory corruption vulnerability exists in the processing of BMP images by Good Photo image processing software. An attacker can cause the program to crash by constructing a...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2018/04/13 12:0 a.m.4 views

2345 Viewer Handles BMP Images with Denial of Service Vulnerability

2345 Viewer is one of the fastest and most format-compatible high-definition image viewing software. A denial-of-service vulnerability exists in the handling of BMP images in 2345 Chart Viewer. An attacker who exploits this vulnerability to construct a malformed BMP image can cause the program to...

7.7AI score
SaveExploits0
Veracode
Veracode
added 2018/04/11 8:30 a.m.14 views

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a bmp file to the application, when used with the -c zip option, to cause a denial of service DoS through buffer over-read...

7.5CVSS8.1AI score0.03205EPSS
SaveExploits1References3Affected Software2
Veracode
Veracode
added 2018/04/11 8:14 a.m.31 views

Denial Of Service (DoS) Through Heap Buffer Overflow

libtiff.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in the PackBitsPreEncode function in tifpackbits.c where an attacker can send a large BMP image with width = 65663, causing the denial of service DoS, and possible other attacks...

9.8CVSS9AI score0.13722EPSS
SaveExploits1References10Affected Software2
Veracode
Veracode
added 2018/04/11 7:37 a.m.20 views

Denial Of Service (DoS) Through Out-of-Bounds (OOB) Read

libtiff.so is vulnerable to denial-of-service DoS through out-of-bound OOB read. The vulnerability exists in the DumpModeEncode function in tifdumpmode.c, only when the -c none option is used, and allows attackers to cause a denial of service DoS attack when parsing a malicious BMP image...

6.5CVSS7.4AI score0.02295EPSS
SaveExploits1References1Affected Software2
NVD
NVD
added 2018/03/30 8:29 a.m.20 views

CVE-2018-9141

On Samsung mobile devices with L5.x, M6.0, and N7.x software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105...

9.3CVSS8AI score0.02399EPSS
SaveExploits0References1
Prion
Prion
added 2018/03/30 8:29 a.m.16 views

Information disclosure

On Samsung mobile devices with L5.x, M6.0, and N7.x software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105...

9.3CVSS7.9AI score0.02399EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/03/30 8:29 a.m.7 views

CVE-2018-9141

On Samsung mobile devices with L5.x, M6.0, and N7.x software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105...

7.8CVSS6.1AI score0.02399EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/30 8:0 a.m.23 views

CVE-2018-9141

On Samsung mobile devices with L5.x, M6.0, and N7.x software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105...

8AI score0.02399EPSS
SaveExploits0References1
CVE
CVE
added 2018/03/30 8:0 a.m.45 views

CVE-2018-9141

CVE-2018-9141 affects Samsung Gallery on Android L(5.x), M(6.0), and N(7.x). A remote attacker can execute arbitrary code by supplying a specially crafted BMP file to Gallery, due to vulnerability in BMP handling (aka SVE-2017-11105). Remediation relies on Samsung security updates (see securityUp...

9.3CVSS7.9AI score0.02399EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2018/03/07 12:0 a.m.33 views

Adobe Acrobat Pro DC ImageConversion EMF BMP Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.8CVSS5.6AI score0.08011EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/03/05 12:0 a.m.5 views

Cimg heap buffer out-of-bounds read vulnerability (CNVD-2018-05449)

CImg is an open source C++ tool library for image processing . A heap buffer out-of-bounds read vulnerability exists in the 'loadbmp' function of the CImg.h file in CImg version 220. No detailed vulnerability details are provided at this time...

7.8CVSS7.1AI score0.01249EPSS
SaveExploits1References1
NVD
NVD
added 2018/03/02 2:29 p.m.20 views

CVE-2018-7637

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4...

7.8CVSS7.4AI score0.01249EPSS
SaveExploits1References3
Prion
Prion
added 2018/03/02 2:29 p.m.23 views

Heap overflow

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "256 colors" case, aka case 8...

6.8CVSS7.4AI score0.01349EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2018/03/02 2:29 p.m.17 views

CVE-2018-7640

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a Monochrome case, aka case 1...

7.8CVSS7.4AI score0.01237EPSS
SaveExploits1References3
NVD
NVD
added 2018/03/02 2:29 p.m.20 views

CVE-2018-7638

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "256 colors" case, aka case 8...

7.8CVSS7.4AI score0.01249EPSS
SaveExploits1References3
Prion
Prion
added 2018/03/02 2:29 p.m.14 views

Heap overflow

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 bits colors" case, aka case 16...

6.8CVSS7.4AI score0.01349EPSS
SaveExploits2References3Affected Software1
UbuntuCve
UbuntuCve
added 2018/03/02 2:29 p.m.18 views

CVE-2018-7639

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 bits colors" case, aka case 16...

7.8CVSS7.2AI score0.01249EPSS
SaveExploits1References3
Rows per page
Query Builder