Lucene search
+L

581 matches found

Talos
Talos
•added 2018/07/19 12:00 a.m.•63 views

ACD Systems Canvas Draw 4 PlanarConfiguration Heap Overflow Code Execution Vulnerability

Summary An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerabili...

8.8CVSS8.2AI score0.01498EPSS
SaveExploits1
Talos
Talos
•added 2018/07/19 12:00 a.m.•61 views

ACD Systems Canvas Draw 4 Resolution_Set Out of Bounds Write Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this...

8.8CVSS8AI score0.01499EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2018/07/19 12:00 a.m.•15 views

PT-2018-16252 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: A heap overflow exists in the TIFF parsing functionality. A specially crafted TIFF image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to execute co...

8.8CVSS8.4AI score0.01498EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2018/07/19 12:00 a.m.•12 views

PT-2018-16253 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: An out-of-bounds write exists in the TIFF parsing functionality. A specially crafted TIFF image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to gai...

8.8CVSS8.4AI score0.01819EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/19 12:00 a.m.•3 views

CVE-2018-3859: Out-of-bounds Write

An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability...

8.8CVSS7.9AI score0.01819EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/19 12:00 a.m.•2 views

CVE-2018-3871: Out-of-bounds Write

An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability an...

8.8CVSS7.9AI score0.01499EPSS
SaveExploits1References3
Talos
Talos
•added 2018/07/19 12:00 a.m.•47 views

ACD Systems Canvas Draw 4 Invert Map Out-of-Bounds Write Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...

8.8CVSS7.9AI score0.01499EPSS
SaveExploits1
Talos
Talos
•added 2018/07/19 12:00 a.m.•51 views

ACD Systems Canvas Draw 4 IO Metadata Out-of-Bounds Write Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...

8.8CVSS7.9AI score0.01456EPSS
SaveExploits1
OSS-Fuzz
OSS-Fuzz
•added 2018/05/15 4:57 p.m.•20 views

skia/api_draw_functions: Use-of-uninitialized-value in is_finite

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5734506001596416 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

6.8AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2018/05/11 12:00 a.m.•12 views

Mozilla Firefox Heap Memory Misreference Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A memory misreference vulnerability exists in mozilla::WebGLContext::DrawElementsInstanced in Mozilla Firefox during WebGL operations. An attacker could exploit this vulnerability to cause a...

7.5CVSS8.6AI score0.02278EPSS
SaveExploits0References1
OSV
OSV
•added 2018/04/24 7:29 p.m.•13 views

CVE-2016-9043

An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 CdrGfx - Corel Graphics Engine 64-Bit - 18.1.0.661. A specially crafted EMF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific EMF file to...

7.8CVSS5.9AI score0.02642EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
•added 2018/04/10 6:54 p.m.•10 views

Qemu: Out-of-bounds read in vga_draw_text routine

An out-of-bounds read access issue was found in the VGA emulator of QEMU. It could occur in vgadrawtext routine, while updating display area for a vnc client. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS...

6CVSS7.1AI score0.00683EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2018/04/10 8:47 a.m.•15 views

Qemu: Out-of-bounds read in vga_draw_text routine

An out-of-bounds read access issue was found in the VGA emulator of QEMU. It could occur in vgadrawtext routine, while updating display area for a vnc client. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS...

6CVSS7.1AI score0.00683EPSS
SaveExploits1References4
OSS-Fuzz
OSS-Fuzz
•added 2018/03/01 1:47 a.m.•24 views

skia/api_draw_functions: Use-of-uninitialized-value in set_sat

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6302702343553024 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

6.7AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2018/01/23 6:29 p.m.•6 views

DEBIAN-CVE-2018-5683

The vgadrawtext function in Qemu allows local OS guest privileged users to cause a denial of service out-of-bounds read and QEMU process crash by leveraging improper memory address validation...

6CVSS6.3AI score0.00683EPSS
SaveExploits1References1
OSV
OSV
•added 2018/01/23 12:00 a.m.•11 views

UBUNTU-CVE-2018-5683

The vgadrawtext function in Qemu allows local OS guest privileged users to cause a denial of service out-of-bounds read and QEMU process crash by leveraging improper memory address validation...

6CVSS6.9AI score0.00683EPSS
SaveExploits1References5
CNVD
CNVD
•added 2018/01/22 12:00 a.m.•6 views

QEMU Denial of Service Vulnerability (CNVD-2018-03275)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A security vulnerability exists in the 'vgadrawtext' function in QEMU. A local attacker can exploit this vulnerability to cause a denial of...

6CVSS6.3AI score0.00683EPSS
SaveExploits1References1
CNVD
CNVD
•added 2017/09/21 12:00 a.m.•5 views

Speedmaster Mom and Pop App has SMS Bombing Vulnerability

Speed Maternity App is a shopping application platform for maternity and baby products. There is an SMS bombing vulnerability in the lucky draw section of the Speed Maternity and Baby APP, where an attacker can obtain a specified prize by modifying the function of the prize ID, and consume server...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/09/01 12:00 a.m.•40 views

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2017:2315-1)

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer : - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc : - New...

9.8CVSS7.4AI score0.03864EPSS
SaveExploits0References42
OSV
OSV
•added 2017/08/29 11:29 p.m.•6 views

DEBIAN-CVE-2017-13758

In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint function in MagickCore/draw.c...

6.5CVSS7.5AI score0.01979EPSS
SaveExploits0References1
Rows per page
Query Builder