Lucene search
+L

515 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.39 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.29 views

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01623EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/09 1:15 p.m.23 views

CVE-2020-6349

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS0.01623EPSS
SaveExploits0References3
NVD
NVD
added 2020/09/09 1:15 p.m.21 views

CVE-2020-6348

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS0.01623EPSS
SaveExploits0References3
Prion
Prion
added 2020/09/09 1:15 p.m.22 views

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.5AI score0.01623EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/09/09 12:53 p.m.32 views

CVE-2020-6349

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.6AI score0.01623EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/09/09 12:52 p.m.28 views

CVE-2020-6348

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.6AI score0.01623EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.15 views

ImageMagick: memory leak in WriteGIFImage function in coders/gif.c

A memory leak vulnerability has been discovered in ImageMagick in the WriteGIFImage function of coders/gif.c file. An attacker could use this flaw to cause a denial of service via a crafted file...

6.5CVSS5.7AI score0.01777EPSS
SaveExploits0References4
NVD
NVD
added 2020/02/18 6:15 p.m.24 views

CVE-2015-7505

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

8.8CVSS9.1AI score0.02876EPSS
SaveExploits2References2
Prion
Prion
added 2020/02/18 6:15 p.m.22 views

Stack overflow

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

6.8CVSS8.7AI score0.02876EPSS
SaveExploits2References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/02/18 6:15 p.m.30 views

CVE-2015-7505

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

8.8CVSS7.7AI score0.02876EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2020/02/18 5:45 p.m.31 views

CVE-2015-7505

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

9.1AI score0.02876EPSS
SaveExploits2References2
CVE
CVE
added 2020/02/18 5:45 p.m.66 views

CVE-2015-7505

Libnsgif 0.1.2 contains a stack-based buffer overflow in gif_next_LZW (libnsgif.c) that can crash the host or allow arbitrary code execution via crafted LZW data in a GIF file. Multiple sources (CNVD-2020-16719, OSV Debian/Debian CVE trackers, NVD mirror entries) describe the vulnerability and co...

8.8CVSS9AI score0.02876EPSS
SaveExploits2References2Affected Software1
Debian CVE
Debian CVE
added 2020/02/18 5:45 p.m.49 views

CVE-2015-7505

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LZW stream in a GIF file...

8.8CVSS9.1AI score0.02876EPSS
SaveExploits2
Prion
Prion
added 2020/02/18 2:15 p.m.18 views

Out-of-bounds

The gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read and application crash via a crafted LZW stream in a GIF file...

4.3CVSS6.8AI score0.011EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/02/18 1:54 p.m.56 views

CVE-2015-7506

The CVE-2015-7506 entry concerns Libnsgif, a GIF decoding library. A vulnerability in the function gif_next_LZW in libnsgif.c (Libnsgif 0.1.2) allows context-dependent attackers to cause a denial of service via a crafted LZW stream in a GIF file, via an out-of-bounds read that crashes the applica...

6.5CVSS6.1AI score0.011EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2020/02/06 6:15 p.m.19 views

Design/Logic Flaw

A vulnerability exists in HCView aka Hardcoreview 1.4 due to a write access violation with a GIF file...

7.5CVSS7AI score0.01315EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/02/06 5:18 p.m.57 views

CVE-2012-6306

CVE-2012-6306 affects HCView (aka Hardcoreview) 1.4. The vulnerability is caused by a write access violation triggered by a GIF file. Concrete details specified in connected documents identify the affected product and the root cause as a GIF-processing write violation, but no remediation or explo...

9.8CVSS9.2AI score0.01315EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2019/12/28 3:41 a.m.37 views

CVE-2018-5711

gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or...

5.5CVSS3.4AI score0.13204EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.43 views

EulerOS 2.0 SP3 : giflib (EulerOS-SA-2019-2587)

According to the versions of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service program crash via crafted image an...

5.5CVSS6.5AI score0.02113EPSS
SaveExploits1References3
Rows per page
Query Builder