canvas buffer overflow vulnerability

canvas is an image drawing software package. A buffer overflow vulnerability exists in canvas 1.6.9 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service or execute arbitrary code...

CVE-2020-8215

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

CVE-2020-8215

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

Buffer overflow

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

CVE-2020-8215

The CVE-2020-8215 entry concerns a buffer overflow in the canvas library. Affected component: canvas (versions

Same Origin Policy Bypass

WebKitGTK+ is vulnerable to same origin policy bypass. It was found that WebKit did not correctly restrict read access to images created from the "canvas" element. Malicious web content could allow a remote attacker to bypass the same-origin policy and potentially access sensitive image data...

CVE-2019-9817

Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...

CVE-2018-18511

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected.. This vulnerability affects Firefox 65.0.1...

CVE-2019-11742

A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a canvas element due to an error in how same-origin policy is applied to cached image content. The resulting same-origin policy violation could allow for data theft. This...

Immunity Canvas: SMBGHOST

Name| SMBGHOST ---|--- CVE| CVE-2020-0796-1 Exploit Pack| CANVAS Description| SMBGHOST Notes| CVE Name: CVE-2020-0796 VENDOR: Microsoft NOTES: some notes here VersionsAffected: VERSIONS Repeatability: None References:...

Immunity Canvas: SMBGHOST_LPE

Name| smbghostlpe ---|--- CVE| CVE-2020-0796 Exploit Pack| CANVAS Description| smbghostlpe Notes| CVE Name: CVE-2020-0796 Notes: Tested: - Windows 10 1903 x64 - Windows 10 1909 x64 VENDOR: Microsoft CVE Url: https://nvd.nist.gov/vuln/detail/CVE-2020-0796 CVSS: 10.0...

Moderate: Red Hat Security Advisory: novnc security update

An updated novnc package that fixes one security issue is now available for Red Hat Enterprise Linux OpenStack Platform 13.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

The vulnerability of the TransferFromImageBitmap method in Thunderbird email clients and Firefox and Firefox ESR browsers relates to the ability to read canvas elements, ignoring security policies that would prevent unauthorized access to information.

The vulnerability of the TransferFromImageBitmap method in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the ability to read canvas elements, while ignoring security policies. Exploiting this vulnerability can allow an attacker who operates remotely to gain...

Immunity Canvas: OWA_RCE

Name| owarce ---|--- CVE| CVE-2020-0688 Exploit Pack| CANVAS Description| owarce Notes| CVE Name: CVE-2020-0688 VENDOR: Microsoft NOTES: This exploit has been tested on Microsoft Exchange Server 2016 CU 15 VersionsAffected: VERSIONS Repeatability: Infinite References:...

Immunity Canvas: SSRS_VIEWSTATE_RCE

Name| ssrsviewstaterce ---|--- CVE| CVE-2020-0618 Exploit Pack| CANVAS Description| ssrsviewstaterce Notes| CVE Name: CVE-2020-0618 VENDOR: Microsoft NOTES: This exploit has been tested on SQL Server 2016 VersionsAffected: VERSIONS Repeatability: Infinite References:...

Immunity Canvas: ZABBIX

Name| zabbix ---|--- CVE| CVE-2013-3628 Exploit Pack| CANVAS Description| Zabbix = 2.0.8 PHP File inclusion exploit Notes| Repeatability: Infinite VENDOR: Zabbix CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-3628 CVE Name: CVE-2013-3628...

CVE-2018-12359

A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60,...

Immunity Canvas: NETSCALER_TRAVERSAL_RCE

Name| netscalertraversalrce ---|--- CVE| CVE-2019-19781 Exploit Pack| CANVAS Description| netscalertraversalrce Notes| CVE Name: CVE-2019-19781 VENDOR: Citrix NOTES: This version of the module will take care of all our artifacts and will report them just to be safe in case something went wrong...

The vulnerability of the canvas objects in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows attackers to disclose protected information.

The vulnerability of the Canvas object in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

canvasbeauty.com.hk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1023622 Security Researcher Dipu1A Helped patch 999 vulnerabilities Received 5 Coordinated Disclosure badges Received 22 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting canvasbeauty.com.hk website...