Lucene search
K

280 matches found

CNNVD
CNNVD
added 2021/06/08 12:0 a.m.2 views

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. SAP 3D Visual Enterprise Viewer 9 suffers from an input validation error vulnerability that can be exploited by an attacker to cause an application crash with the help of a specially crafted PCX file...

5.5CVSS5.6AI score0.00561EPSS
Exploits0References3
OSV
OSV
added 2021/04/29 5:15 p.m.2 views

CVE-2021-31436

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.02761EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/03/11 12:0 a.m.3 views

Pillow 缓冲区错误漏洞

Pillow is a Python-based image processing library.A buffer overflow vulnerability exists in Pillow Tiff image file processing, which can be exploited by remote attackers to submit special file requests that trick users into parsing, which can crash the application or execute arbitrary code in the...

9.8CVSS6.5AI score0.02281EPSS
Exploits0References9
CNVD
CNVD
added 2021/03/10 12:0 a.m.37 views

Libtiff Integer Overflow Vulnerability

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. An integer overflow vulnerability exists in tifgetimage.c in libtiff. An attacker can exploit this vulnerability to inject and execute arbitrary code via specially crafted TIFF files...

7.8CVSS7.3AI score0.01922EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.3 views

SAP 3D Visual Enterprise Viewer 安全漏洞

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. A denial of service vulnerability exists in SAP 3D Visual Enterprise Viewer 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially crafted .TIFF...

7.8CVSS5.6AI score0.01242EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/03/09 12:0 a.m.2 views

Silicon Graphics LibTIFF 缓冲区错误漏洞

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A memory allocation failure vulnerability exists in tifread.c in libtiff. An attacker could exploit this vulnerability to cause an abort via a specially crafted TIFF document, which could result in a...

5.5CVSS5.7AI score0.01226EPSS
Exploits0References17
CNNVD
CNNVD
added 2021/02/09 12:0 a.m.9 views

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. An attacker can exploit this vulnerability via specially crafted files to achieve code execution...

9.8CVSS7.4AI score0.01855EPSS
Exploits1References2
CNVD
CNVD
added 2020/12/15 12:0 a.m.34 views

Industrial Light And Magic Academy Software Foundation OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19857)

Industrial Light And Magic Academy Software Foundation OpenEXR is an image file format for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation A buffer overflow vulnerability exists in OpenEXR, which can be exploited by remote attackers to submit special file...

5.5CVSS3.4AI score0.01134EPSS
Exploits1References1
CNVD
CNVD
added 2020/12/15 12:0 a.m.27 views

Industrial Light and Magic Academy Software Foundation OpenEXR code issue vulnerability

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

5.5CVSS1.4AI score0.01204EPSS
Exploits1References1
CNNVD
CNNVD
added 2020/12/09 12:0 a.m.5 views

Industrial Light And Magic OpenEXR 代码问题漏洞

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

5.5CVSS6.9AI score0.01204EPSS
Exploits1References9
CNVD
CNVD
added 2020/11/20 12:0 a.m.1 views

Binary vulnerability in FFmpeg tiff format

FFmpeg is a set of open source computer programs that can be used to record and convert digital audio and video into streams. A binary vulnerability exists in the FFmpeg tiff format, which can be exploited by attackers to cause a denial-of-service attack...

6.8AI score
Exploits0
RedHat Linux
RedHat Linux
added 2020/07/22 12:40 p.m.2 views

OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239)

Vulnerability in the Java SE product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of...

5.3CVSS5.9AI score0.05166EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.6 views

The vulnerability of the exif_process_SOFn function in the EXIF interpreter for the PHP programming language allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the exifprocessSOFn function in the EXIF interpreter for the PHP programming language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.5CVSS7.1AI score0.06183EPSS
Exploits1References14Affected Software5
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.3 views

ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file

An infinite loop has been found in the way ImageMagick reads Multiple-image Network Graphics MNG data. An attacker could exploit this to cause a denial of service via crafted MNG file...

6.5CVSS5.7AI score0.03174EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.2 views

The vulnerability of the Foxit Studio Photo graphic editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit Studio Photo graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability allows a hacker to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF format file...

7.8CVSS7.7AI score0.11057EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.3 views

The vulnerability of the Foxit Studio Photo graphic editor lies in the ability to write code beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit Studio Photo graphic editor is related to writing code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF forma...

7.8CVSS7.9AI score0.11057EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2020/03/18 12:0 a.m.1 views

Foxit Studio Photo Resource Management Error Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A resource management error vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which originates from the program failing to veri...

8.8CVSS7.7AI score0.11057EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/18 12:0 a.m.2 views

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18403)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which results from the program failing to properly validate...

8.8CVSS8AI score0.11057EPSS
Exploits0References1
CNVD
CNVD
added 2020/02/13 12:0 a.m.1 views

Denial of Service Vulnerability in FreeImage TIFF Files

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A denial of service vulnerability exists in the FreeImage image parsing library when parsing meta information ...

6.7AI score
Exploits0
PyPA
PyPA
added 2020/01/03 1:15 a.m.5 views

PYSEC-2020-81

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS6.9AI score0.01975EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder