Lucene search
+L

20285 matches found

Cvelist
Cvelist
added 2021/04/08 10:06 p.m.61 views

CVE-2021-3482

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...

7AI score0.02295EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/04/08 10:06 p.m.35 views

CVE-2021-3482

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...

6.5CVSS6.7AI score0.02295EPSS
SaveExploits0
Veracode
Veracode
added 2021/04/06 7:43 a.m.27 views

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow in TabStrip allows an attacker to execute arbitrary code on the host OS...

8.8CVSS3.9AI score0.01361EPSS
SaveExploits0References10Affected Software3
RedhatCVE
RedhatCVE
added 2021/04/05 8:03 p.m.30 views

CVE-2021-3482

A flaw was found in Exiv2. Improper input validation of the rawData.size property in the Jp2Image::readMetadata function in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. The highest threat from this vulnerability is to confidentialit...

6.5CVSS3.2AI score0.02295EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/04/01 12:00 a.m.30 views

Debian DLA-2612-1 : leptonlib security update

Several issues have been found by ClusterFuzz in leptonlib, an image processing library. All issues are related to heap-based buffer over-read in several functions or a denial of service application crash with crafted data. For Debian 9 stretch, these problems have been fixed in version...

7.5CVSS7.4AI score0.02871EPSS
SaveExploits4References7
Debian
Debian
added 2021/03/31 10:09 a.m.135 views

[SECURITY] [DLA 2612-1] leptonlib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2612-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 31, 2021 https://wiki.debian.org/LTS -...

7.5CVSS8AI score0.02871EPSS
SaveExploits4
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.36 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.33 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.43 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.37 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.32 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/26 5:15 p.m.23 views

CVE-2021-20284

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability...

5.5CVSS0.01287EPSS
SaveExploits1References4
OSV
OSV
added 2021/03/26 5:15 p.m.33 views

CVE-2021-20284

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability...

5.5CVSS6.8AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/03/26 5:15 p.m.34 views

CVE-2021-20284

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability...

5.5CVSS6.8AI score0.01287EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/03/26 4:39 p.m.30 views

CVE-2021-20284

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability...

6.5AI score0.01287EPSS
SaveExploits1References4
CVE
CVE
added 2021/03/26 4:39 p.m.197 views

CVE-2021-20284

CVE-2021-20284 affects GNU Binutils (version 2.35.1) with a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section (elf.c) caused by incorrect calculation of the number of symbols. The vulnerability is described as having a highest impact on availability. The provided materials iden...

5.5CVSS6AI score0.01287EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2021/03/24 10:15 p.m.25 views

CVE-2020-7852

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS0.00926EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/24 10:15 p.m.19 views

Heap overflow

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

6.8CVSS8AI score0.00926EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/03/24 9:10 p.m.68 views

CVE-2020-7852

CVE-2020-7852 affects DaviewIndy (Daview.exe) and is described as a heap-based overflow triggered by opening a malformed ex.j2c file, potentially allowing arbitrary code execution. Publicly documented impact includes local exploitation with high integrity/availability impact, and a mix of network...

7.8CVSS8AI score0.00926EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/03/24 12:00 a.m.34 views

EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2021-1692)

According to the version of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in OpenJPEG 2.3.0. Missing checks for headerinfo.height and headerinfo.width in the function pnmtoimage in...

8.8CVSS6.9AI score0.02439EPSS
SaveExploits0References2
Rows per page
Query Builder