512 matches found
CVE-2019-6245
An issue was discovered in Anti-Grain Geometry AGG 2.4 as used in SVG++ aka svgpp 1.2.3. In the function agg::cellaa::notequal, dx is assigned to x2 - x1. If dx = dxlimit, which is 16384 polysubpixelshift, this function will call itself recursively. There can be a situation where x2 - x1 is alway...
CVE-2019-6247
CVE-2019-6247 affects Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (svgpp) 1.2.3. The vulnerability is a heap-based buffer overflow in svgpp_agg_render; in render_scanlines_aa_solid, blend_hline is invoked repeatedly, and each call writes heap data, with multiple calls overwriting heap data, po...
CVE-2019-6245
CVE-2019-6245 affects svgpp (SVG++), via Anti-Grain Geometry (AGG) 2.4 integration. The issue is in agg::cell_aa::not_equal where dx is computed as (x2 - x1); if dx >= dx_limit (16384 <
NASA openVSP 3.16.1 - Denial of Service Exploit
Exploit for windows platform in category dos / poc Exploit Title: NASA openVSP 3.16.1 - Denial of Service PoC Exploit Author : L0RD Vendor Homepage : https://software.nasa.gov/software/LAR-17491-1 Software link: https://github.com/nasa/OpenVSP Version: 3.16.1 Tested on: Windows 10 CVE: N/A...
NASA openVSP 3.16.1 - Denial of Service (PoC)
Exploit Title: NASA openVSP 3.16.1 - Denial of Service PoC Exploit Author : L0RD Date: 2018-08-28 Vendor Homepage : https://software.nasa.gov/software/LAR-17491-1 Software link: https://github.com/nasa/OpenVSP Version: 3.16.1 Tested on: Windows 10 CVE: N/A Description : The Vehicle Sketch Pad VSP...
CVE-2018-15854
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly...
Null pointer dereference
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly...
CVE-2018-15854
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly...
PT-2018-13245 · Xkbcommon +4 · Xkbcommon +4
Name of the Vulnerable Software and Affected Versions: xkbcommon versions prior to 0.8.1 Description: The issue arises from unchecked NULL pointer usage in the xkbcommon parser, which can be exploited by local attackers to cause a crash due to a NULL pointer dereference. This can occur when a...
UBUNTU-CVE-2018-15855
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkbgeometry section was mishandled...
prevody.jednotky.sk XSS vulnerability
Open Bug Bounty ID: OBB-550774 Description| Value ---|--- Affected Website:| prevody.jednotky.sk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. The attacks are possible because it is possible to bypass the validation of channel geometry in the ReadJP2Image function in coders/jp2.c...
DEBIAN-CVE-2017-13145
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash...
CVE-2017-13145
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash...
CVE-2017-13145
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash...
UBUNTU-CVE-2017-13145
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash...
CVE-2017-13145
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash...
Microsoft Windows - IOCTL_DISK_GET_DRIVE_GEOMETRY_EX Kernel partmgr Pool Memory Disclosure Exploit
Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1156&desc=2 We have discovered that the handler of the IOCTLDISKGETDRIVEGEOMETRYEX IOCTL in partmgr.sys discloses portions of uninitialized pool memory to user-mode clients, due ...
Cirrus VGA Heap overflow via display refresh
ISSUE DESCRIPTION When a graphics update command gets passed to the VGA emulator, there are 3 possible modes that can be used to update the display: blank - Clears the display text - Treats the display as showing text graph - Treats the display as showing graphics After the display geometry gets...
Mozilla Firefox and Firefox ESR nsImageGeometryMixin class arbitrary code execution vulnerability
Mozilla Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. The Mozilla Firefox and Firefox ESR nsImageGeometryMixin class fails to properly execute variables during processing of the INPUT element, allowing remote attackers to exploit the vulnerability t...