Lucene search
+L

208 matches found

OSV
OSV
•added 2017/01/23 7:59 a.m.•2 views

DEBIAN-CVE-2017-5563

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...

8.8CVSS7.9AI score0.03301EPSS
SaveExploits0References1
OSV
OSV
•added 2017/01/20 3:59 p.m.•4 views

DEBIAN-CVE-2016-5319

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file...

6.5CVSS7.8AI score0.0374EPSS
SaveExploits0References1
OSV
OSV
•added 2016/10/31 10:59 a.m.•7 views

CVE-2016-8878

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return...

8.8CVSS6.1AI score0.0259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/09/28 12:0 a.m.•4 views

PT-2017-9179 Ā· AutotraceĀ +1 Ā· AutotraceĀ +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer overflow in the pstoedit suffix table init function, which can be triggered by a crafted bmp image file. This can cause a denial of service due to an...

9.8CVSS6.5AI score0.02468EPSS
SaveExploits0References72
BDU FSTEC
BDU FSTEC
•added 2016/09/19 12:0 a.m.•8 views

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the CoreGraphics component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted BMP image...

6.8CVSS8.6AI score0.04331EPSS
SaveExploits2References10Affected Software1
OSV
OSV
•added 2016/07/22 2:59 a.m.•5 views

CVE-2016-4600

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4602...

8.8CVSS7.6AI score0.02331EPSS
SaveExploits0References4
NVD
NVD
•added 2016/07/22 2:59 a.m.•21 views

CVE-2016-4597

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4600, and CVE-2016-4602...

8.8CVSS8.7AI score0.02331EPSS
SaveExploits0References4
NVD
NVD
•added 2016/07/22 2:59 a.m.•22 views

CVE-2016-4596

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602...

8.8CVSS8.7AI score0.02331EPSS
SaveExploits0References4
Prion
Prion
•added 2016/07/22 2:59 a.m.•18 views

Memory corruption

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602...

6.8CVSS8.6AI score0.02331EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2016/07/22 1:0 a.m.•33 views

CVE-2016-4600

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4602...

8.7AI score0.02331EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2016/07/22 1:0 a.m.•40 views

CVE-2016-4596

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602...

8.7AI score0.02331EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2016/07/22 1:0 a.m.•38 views

CVE-2016-4602

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600...

8.7AI score0.02331EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2016/07/22 1:0 a.m.•31 views

CVE-2016-4597

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4600, and CVE-2016-4602...

8.7AI score0.02331EPSS
SaveExploits0References4
CVE
CVE
•added 2016/07/22 1:0 a.m.•56 views

CVE-2016-4597

CVE-2016-4597 affects QuickTime in Apple OS X prior to 10.11.6. A remote attacker could cause arbitrary code execution or a denial of service by a crafted FlashPix bitmap image due to a memory corruption issue. Root cause and affected components are described in accompanying CNVD listings for Qui...

8.8CVSS8.6AI score0.02331EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2016/04/18 12:0 a.m.•7 views

UBUNTU-CVE-2015-7552

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

7.8CVSS7.3AI score0.03868EPSS
SaveExploits0References4
CNVD
CNVD
•added 2016/03/15 12:0 a.m.•4 views

PictBear Buffer Overflow Vulnerability

PictBear is image processing software for general users, known as the simple version of PHOTOSHOP. A buffer overflow vulnerability exists in the impBmp.ppi module of the software, which allows an attacker to exploit the vulnerability to construct a malformed BMP image that can lead to flooding of...

8AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
•added 2015/11/16 7:59 p.m.•3 views

CVE-2015-7897

The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service memory corruption via a crafted BMP image file...

7.5CVSS5.6AI score0.06996EPSS
SaveExploits1References5
OSV
OSV
•added 2015/08/13 8:56 p.m.•8 views

MGASA-2015-0313 Updated gdk-pixbuf2.0 package fixes security vulnerability

Security researcher Gustavo Grieco reported a heap overflow in gdk-pixbuf. This issue is triggered by the scaling of a malformed bitmap format image and results in a potentially exploitable crash CVE-2015-4491...

6.8CVSS8.8AI score0.084EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2015/06/05 12:0 a.m.•14 views

The vulnerability of the IBM Domino electronic document management system allows a perpetrator to execute arbitrary code.

The vulnerability of the IBM Domino electronic document management system arises due to a buffer overflow error. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using a specially crafted BMP image...

10CVSS6.4AI score0.07958EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2015/06/05 12:0 a.m.•13 views

The vulnerability of the IBM Domino electronic document management system allows a perpetrator to execute arbitrary code.

The vulnerability of the IBM Domino electronic document management system arises due to a buffer overflow error. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted BMP image...

10CVSS6.4AI score0.07958EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder