194 matches found
CVE-2021-22204
CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgraded proof-of-concept for CVE-2021-22204, a vulnerability in ExifTool versions 7.44 through 12.23 that allows arbitrary code execution when processing malicious DjVu files. Credit This is derivative work. The vulnerability and the original...
CVE-2021-22204
CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...
CVE-2021-22205
CVE-2021-22205 - GitLab Unauthenticated Remote Code Execution CVE-2021-22205 is a critical Remote Code Execution RCE vulnerability affecting GitLab Community Edition CE and Enterprise Edition EE. The vulnerability originates from improper validation of uploaded image files that are processed by t...
Astra Linux – Vulnerability in DjVuLibre
In DjVuLibre 3.5.27, the DjVmDir.cpp file within the DJVU reader component allows attackers to cause a denial-of-service attack resulting in a crash of the application by creating a DJVU file that triggers a heap-based buffer overflow attack in the GStringRep::strdup function within...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. A malicious read operation in the function DJVU::DataPool::hasdata, through a crafted djvu file, may cause the application to crash and lead to other issues...
CVE-2021-22204
CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: root@kitploit: bash CVE-2021-2204.sh "system'id'" happy.jpg Revers...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. A heap buffer overflow occurs in the function DJVU::GBitmap::decode, due to a malicious djvu file, which may lead to the application crashing and other related issues...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. A stack overflow occurred in the function DJVU::DjVuDocument::getdjvufile, due to a malicious djvu file, which could lead to the application crashing and other related issues...
Astra Linux – Vulnerability in DjVuLibre
A flaw was discovered in djvulibre-3.5.28 and earlier. An integer overflow in the render function in tools/ddjvu, through a crafted djvu file, may cause the application to crash and lead to other issues...
EUVD-2021-19338
Malware in sbrugna...
EUVD-2017-6192
Malware in sbrugna...
EUVD-2017-6049
Malware in sbrugna...
EUVD-2017-4014
Malware in sbrugna...
EUVD-2017-6059
Malware in sbrugna...
EUVD-2021-26820
Malware in sbrugna...
EUVD-2017-4013
Malware in sbrugna...
EUVD-2017-6055
Malware in sbrugna...
EUVD-2017-6057
Malware in sbrugna...