Lucene search
+L

12975 matches found

UbuntuCve
UbuntuCve
added 2017/11/12 6:29 p.m.31 views

CVE-2017-16797

In SWFTools 0.9.2, the pngload function in lib/png.c does not properly validate an alloclen64 multiplication of width and height values, which allows remote attackers to cause a denial of service integer overflow, heap-based buffer overflow, and application crash or possibly have unspecified othe...

7.8CVSS7.3AI score0.01192EPSS
SaveExploits0References2
OSV
OSV
added 2017/11/12 5:29 a.m.7 views

CVE-2017-16793

The wavconvert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service incorrect malloc and heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

7.8CVSS6.1AI score0.01192EPSS
SaveExploits0References1
NVD
NVD
added 2017/11/12 5:29 a.m.24 views

CVE-2017-16793

The wavconvert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service incorrect malloc and heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

7.8CVSS8.2AI score0.01192EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2017/11/12 5:29 a.m.39 views

CVE-2017-16794

The pngload function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file, as demonstrated by an erroneous...

5.5CVSS6.2AI score0.01021EPSS
SaveExploits0References2
Prion
Prion
added 2017/11/12 5:29 a.m.25 views

Heap overflow

The pngload function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file, as demonstrated by an erroneous...

4.3CVSS5.5AI score0.01021EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2017/11/12 5:29 a.m.32 views

CVE-2017-16793

The wavconvert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service incorrect malloc and heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

7.8CVSS7.3AI score0.01192EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2017/11/12 5:00 a.m.45 views

CVE-2017-16794

Removed by vendor...

5.5CVSS5.6AI score0.01021EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2017/11/12 5:00 a.m.56 views

CVE-2017-16793

Removed by vendor...

7.8CVSS7.7AI score0.01192EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2017/11/10 2:29 a.m.31 views

CVE-2017-12801

The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service assert fault via a crafted mkv file...

6.5CVSS6.7AI score0.02415EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2017/11/09 12:29 a.m.4 views

CVE-2017-16669

coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixelcache.c...

8.8CVSS6.2AI score0.03397EPSS
SaveExploits1References17
OSV
OSV
added 2017/11/09 12:29 a.m.8 views

UBUNTU-CVE-2017-16669

coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixelcache.c...

8.8CVSS7.6AI score0.03397EPSS
SaveExploits1References12
Cvelist
Cvelist
added 2017/11/09 12:00 a.m.30 views

CVE-2017-16669

coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixelcache.c...

9.1AI score0.03397EPSS
SaveExploits1References14
Debian CVE
Debian CVE
added 2017/11/09 12:00 a.m.32 views

CVE-2017-16669

coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixelcache.c...

8.8CVSS9.7AI score0.03397EPSS
SaveExploits1
CNVD
CNVD
added 2017/11/09 12:00 a.m.8 views

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-36390)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the coders/wpg.c file in GraphicsMagick version 1.3.26. A remote attacker can exploit this vulnerability to cause a denial...

8.8CVSS7.2AI score0.03397EPSS
SaveExploits1References1
OSV
OSV
added 2017/11/06 12:36 p.m.8 views

USN-3474-1 liblouis vulnerability

Raphael Sanchez Prudencio discovered that Liblouis incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could possibly use this to cause a denial of service or potentially execute arbitrary code...

7.8CVSS7.3AI score0.01549EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2017/11/06 12:36 p.m.52 views

USN-3474-1: Liblouis vulnerability

Raphael Sanchez Prudencio discovered that Liblouis incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could possibly use this to cause a denial of service or potentially execute arbitrary code...

7.8CVSS8AI score0.01549EPSS
SaveExploits0
NVD
NVD
added 2017/11/06 5:29 a.m.16 views

CVE-2017-16547

The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application crash or possibly have unspecified other impact via a...

8.8CVSS7.8AI score0.02333EPSS
SaveExploits0References8
OSV
OSV
added 2017/11/06 5:29 a.m.8 views

DEBIAN-CVE-2017-16547

The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application crash or possibly have unspecified other impact via a...

8.8CVSS7.5AI score0.02333EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2017/11/06 5:00 a.m.50 views

CVE-2017-16547

The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application crash or possibly have unspecified other impact via a...

8.8CVSS9AI score0.02333EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/11/06 5:00 a.m.33 views

CVE-2017-16547

The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service negative strncpy and application crash or possibly have unspecified other impact via a...

7.7AI score0.02333EPSS
SaveExploits0References8
Rows per page
Query Builder