Lucene search
+L

3227 matches found

CNVD
CNVD
•added 2018/07/18 12:00 a.m.•14 views

GNU Libextractor mpeg_extractor.c File Infinite Loop Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. An infinite loop vulnerability exists in the 'EXTRACTORmpegextractmethod' function mpegextractor.c file in GNU Libextractor versions prior to 1.7. An attacker can exploit this vulnerability to...

6.5CVSS7.1AI score0.01718EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2018/07/17 3:29 p.m.•13 views

UBUNTU-CVE-2018-14347

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

6.5CVSS7.3AI score0.01718EPSS
SaveExploits1References6
osv_debian
osv_debian
•added 2018/07/17 3:29 p.m.•10 views

DEBIAN-CVE-2018-14347

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

6.5CVSS7.3AI score0.01718EPSS
SaveExploits1References1
Prion
Prion
•added 2018/07/17 3:29 p.m.•19 views

Design/Logic Flaw

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

4.3CVSS7.3AI score0.01718EPSS
SaveExploits1References5Affected Software2
CNVD
CNVD
•added 2018/06/14 12:00 a.m.•49 views

DFArc Path Traversal Vulnerability

DFArc frontend is a frontend integration program for the Dink Smallwood game engine.D-Mod extractor is one of the D-Mod extractors. A path traversal vulnerability exists in D-Mod extractor in DFArc frontend versions prior to 3.14. An attacker can exploit this vulnerability to overwrite arbitrary...

7.5CVSS7.4AI score0.0241EPSS
SaveExploits0References1
Prion
Prion
•added 2018/06/12 8:29 p.m.•24 views

Directory traversal

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

6.4CVSS7.5AI score0.0241EPSS
SaveExploits0References3Affected Software3
osv_cve
osv_cve
•added 2018/06/12 8:29 p.m.•33 views

CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

7.5CVSS7.8AI score0.0241EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/06/12 8:29 p.m.•24 views

CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

7.5CVSS7.2AI score0.0241EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2018/06/12 8:29 p.m.•24 views

DEBIAN-CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

7.5CVSS7.5AI score0.0241EPSS
SaveExploits0References1
NVD
NVD
•added 2018/06/12 8:29 p.m.•25 views

CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

7.5CVSS7.5AI score0.0241EPSS
SaveExploits0References3
CVE
CVE
•added 2018/06/12 8:00 p.m.•84 views

CVE-2018-0496

CVE-2018-0496 affects DFArc and DFArc2’s D-Mod extractor (and RTsoft’s Dink Smallwood HD / ProtonSDK before 3.14). A directory traversal flaw allows an attacker to overwrite arbitrary files on the user’s system. Connected advisories confirm vulnerable components include the D-Mod extractor in DFA...

7.5CVSS7.3AI score0.0241EPSS
SaveExploits0References3Affected Software2
Mend
Mend
•added 2018/06/12 8:00 p.m.•5 views

CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

8.7CVSS0.0241EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/12 12:00 a.m.•7 views

CVE-2018-0496: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

7.5CVSS7.4AI score0.0241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/06/12 12:00 a.m.•5 views

PT-2018-8859

Name of the Vulnerable Software and Affected Versions DFArc versions prior to 3.14 DFArc2 versions prior to 3.14 Dink Smallwood HD versions prior to 3.14 Description The issue is related to directory traversal in the D-Mod extractor, which can be exploited by an attacker to overwrite arbitrary...

7.5CVSS0.0241EPSS
SaveExploits0References14
osv_cve
osv_cve
•added 2018/04/04 5:29 p.m.•13 views

CVE-2017-13254

A other vulnerability in the Android media framework AACExtractor. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507...

7.5CVSS5.8AI score0.00422EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/01/12 11:29 p.m.•22 views

CVE-2017-0855

In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not need...

7.5CVSS5.9AI score0.0173EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/12/06 12:00 a.m.•7 views

PT-2017-14781

Name of the Vulnerable Software and Affected Versions GNU Libextractor version 1.6 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted file of specific formats, including GIF, IT, NSFE, S3M, SID, ...

6.5CVSS0.0236EPSS
SaveExploits1References32
CNVD
CNVD
•added 2017/11/03 12:00 a.m.•16 views

GNU Libextractor 'EXTRACTOR_dvi_extract_method' Function Denial of Service Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in the 'EXTRACTORdviextractmethod' function in the plugins/dviextractor.c file in GNU Libextractor version 1.4. A remote attacker can exploit this vulnerability ...

5.5CVSS6.8AI score0.01307EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2017/10/26 6:29 p.m.•10 views

DEBIAN-CVE-2017-15922

In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTORdviextractmethod function in plugins/dviextractor.c...

5.5CVSS5.8AI score0.01307EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2017/10/26 6:29 p.m.•16 views

UBUNTU-CVE-2017-15922

In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTORdviextractmethod function in plugins/dviextractor.c...

5.5CVSS6.4AI score0.01307EPSS
SaveExploits1References4
Rows per page
Query Builder