Lucene search
+L

18 matches found

UbuntuCve
UbuntuCve
•added 2026/07/27 7:17 p.m.•10 views

CVE-2026-66758

A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...

7.8CVSS6.5AI score0.0036EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2026/04/15 6:58 p.m.•18 views

CVE-2026-40915

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel...

7.8CVSS6.1AI score0.00397EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2009-0262

Malware in sbrugna...

9.3CVSS6.4AI score0.02566EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-3363

Malware in sbrugna...

6.5CVSS7.8AI score0.0151EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:42 a.m.•8 views

SUSE CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

6.5CVSS8.9AI score0.0151EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/07/18 12:00 a.m.•11 views

NASA CFITSIO Buffer Overflow Vulnerability

NASA CFITSIO is a FITS file subroutine library that is primarily used to read and write data files in the FITS Flexible Image Transfer System format. A buffer overflow vulnerability exists in NASA CFITSIO versions prior to 3.43. The vulnerability stems from a networked system or product performin...

9.8CVSS7.3AI score0.07172EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2017/08/10 12:00 a.m.•15 views

The vulnerability of the GetImageDepth function in MagickCore/attribute.c, a console-based graphic editor for ImageMagick, allows a hacker to cause a service failure.

The vulnerability of the GetImageDepth function in MagickCore/attribute.c of the ImageMagick console graphic editor is related to the writing of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure rereading of the buffer in dynami...

4.3CVSS7.3AI score0.0151EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2017/08/01 7:52 a.m.•34 views

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

6.5CVSS6.3AI score0.0151EPSS
SaveExploits0References1
NVD
NVD
•added 2017/07/30 6:29 p.m.•28 views

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

6.5CVSS7.5AI score0.0151EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/07/30 6:29 p.m.•39 views

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

6.5CVSS7AI score0.0151EPSS
SaveExploits0References1
Prion
Prion
•added 2017/07/30 6:29 p.m.•22 views

Heap overflow

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

4.3CVSS6.1AI score0.0151EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2017/07/30 6:29 p.m.•20 views

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

6.5CVSS6.6AI score
SaveExploits0References1
CVE
CVE
•added 2017/07/30 6:00 p.m.•95 views

CVE-2017-11753

CVE-2017-11753 affects ImageMagick; the GetImageDepth function in MagickCore/attribute.c may cause a heap-based buffer over-read when processing a crafted FITS file, potentially enabling denial of service. Affected version noted as ImageMagick 7.0.6-4 in the provided document. No exploit details ...

6.5CVSS6.4AI score0.0151EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2017/07/30 6:00 p.m.•42 views

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

6.9AI score0.0151EPSS
SaveExploits0References1
NVD
NVD
•added 2009/01/22 6:30 p.m.•22 views

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

9.3CVSS7.9AI score0.02566EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2009/01/22 6:30 p.m.•5 views

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

9.3CVSS6.3AI score0.02566EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2009/01/22 6:00 p.m.•30 views

CVE-2009-0254

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System FITS file. NOTE: some of these details are obtained from third party information...

7.9AI score0.02566EPSS
SaveExploits0References5
CVE
CVE
•added 2009/01/22 6:00 p.m.•51 views

CVE-2009-0254

CVE-2009-0254 involves a stack-based buffer overflow in easyHDR PRO 1.60.2 triggered by processing an invalid FITS file. The vulnerability could allow a user‑assisted attacker to execute arbitrary code, with the NVD entry modeling it as a network‑vector issue and providing a high impact. The conn...

9.3CVSS8.1AI score0.02566EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder