Lucene search
+L

581 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 4:45 p.m.•18 views

CVE-2020-6349

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS6.8AI score0.01623EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:40 p.m.•14 views

CVE-2020-6348

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS6.8AI score0.01623EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:21 p.m.•16 views

CVE-2020-24221

An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service DoS via crafted .gif file infinite loop...

5.5CVSS6.5AI score0.00321EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2025/04/23 7:00 a.m.•9 views

A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.

...

8.8CVSS7.9AI score0.01717EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2022-25942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An...

7.8CVSS7.6AI score0.00606EPSS
SaveExploits1References3
NVD
NVD
•added 2024/11/22 10:15 p.m.•37 views

CVE-2024-9114

FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS0.00398EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/22 9:34 p.m.•38 views

CVE-2024-9114 FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS0.00398EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/22 9:34 p.m.•67 views

CVE-2024-9114

FastStone Image Viewer (GIF parsing) has an out-of-bounds write flaw that can lead to remote code execution. The issue arises during GIF file parsing due to insufficient validation of input data, allowing a write past the end of an allocated buffer and enabling code execution in the process conte...

7.8CVSS8AI score0.00398EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/11/22 9:15 p.m.•17 views

CVE-2024-9759

Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

3.3CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/22 9:01 p.m.•77 views

CVE-2024-9759

Tungsten Automation Power PDF is affected by CVE-2024-9759 due to a GIF file parsing flaw that allows an out-of-bounds read. The issue arises from insufficient validation of GIF data, leading to a read past the end of an allocated buffer and information disclosure. Impact is described as potentia...

3.3CVSS3.3AI score0.00252EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/11/22 9:01 p.m.•28 views

CVE-2024-9759 Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

3.3CVSS0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/22 9:01 p.m.•19 views

CVE-2024-9759 Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

3.3CVSS6.1AI score0.00252EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/22 12:00 a.m.•3 views

CVE-2024-9114: Out-of-bounds Write

FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.8AI score0.00398EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/10/21 12:00 a.m.•20 views

Adobe InCopy 16.0 < 17.0.0 Multiple Vulnerabilities (APSB21-110)

The version of Adobe InCopy installed on the remote host is prior to 17.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-110 advisory. - Adobe InCopy version 16.4 and earlier is affected by a memory corruption vulnerability due to insecure handling of a...

9.3CVSS7.1AI score0.02077EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/10/21 12:00 a.m.•21 views

Adobe Dimension < 3.4.4 Multiple Vulnerabilities (APSB21-116) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-116 advisory. - Adobe Dimension versions 3.4.3 and earlier are affected by an out-of-bounds write vulnerability that could result...

9.3CVSS6.9AI score0.03144EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
•added 2024/10/11 12:00 a.m.•15 views

Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS6AI score0.00252EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/09/23 12:00 a.m.•19 views

(0Day) FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FastStone Image Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6.9AI score0.00398EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/08/14 2:56 p.m.•21 views

CVE-2024-41856 Illustrator | Improper Input Validation (CWE-20)

Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.8AI score0.00379EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/23 11:34 a.m.•41 views

CVE-2024-41836 InDesign Desktop | NULL Pointer Dereference (CWE-476)

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service DoS condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue...

5.5CVSS0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/23 11:34 a.m.•27 views

CVE-2024-41836 InDesign Desktop | NULL Pointer Dereference (CWE-476)

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service DoS condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue...

5.5CVSS5.5AI score0.00206EPSS
SaveExploits0References1
Rows per page
Query Builder