Lucene search
+L

322 matches found

osv_cve
osv_cve
•added 2021/04/29 5:15 p.m.•14 views

CVE-2021-31436

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.2AI score0.02761EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/11 12:00 a.m.•24 views

Pillow buffer error vulnerability

Pillow is a Python-based image processing library.A buffer overflow vulnerability exists in Pillow Tiff image file processing, which can be exploited by remote attackers to submit special file requests that trick users into parsing, which can crash the application or execute arbitrary code in the...

9.8CVSS6.5AI score0.02345EPSS
SaveExploits0References9
CNVD
CNVD
•added 2021/03/10 12:00 a.m.•50 views

Libtiff Integer Overflow Vulnerability

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. An integer overflow vulnerability exists in tifgetimage.c in libtiff. An attacker can exploit this vulnerability to inject and execute arbitrary code via specially crafted TIFF files...

7.8CVSS7.3AI score0.01922EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•9 views

Silicon Graphics LibTIFF buffer error vulnerability

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A memory allocation failure vulnerability exists in tifread.c in libtiff. An attacker could exploit this vulnerability to cause an abort via a specially crafted TIFF document, which could result in a...

5.5CVSS5.7AI score0.01226EPSS
SaveExploits0References17
CNNVD
CNNVD
•added 2021/03/09 12:00 a.m.•22 views

SAP 3D Visual Enterprise Viewer security vulnerabilities

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. A denial of service vulnerability exists in SAP 3D Visual Enterprise Viewer 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially crafted .TIFF...

7.8CVSS5.6AI score0.01287EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/09 12:00 a.m.•8 views

CVE-2021-27590: Undefined Security Weakness

When a user opens manipulated Tag Image File Format .TIFF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

7.8CVSS8.2AI score0.01287EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/09 12:00 a.m.•25 views

Accusoft ImageGear buffer error vulnerability

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. An attacker can exploit this vulnerability via specially crafted files to achieve code execution...

9.8CVSS7.4AI score0.01855EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/01/12 3:15 p.m.•14 views

CVE-2021-21458

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

8.8CVSS6.3AI score0.01214EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2021/01/12 3:15 p.m.•16 views

CVE-2021-21449

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

8.8CVSS5.8AI score0.01214EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•85 views

Industrial Light and Magic Academy Software Foundation OpenEXR code issue vulnerability

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

5.5CVSS1.4AI score0.01219EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•74 views

Industrial Light And Magic Academy Software Foundation OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19857)

Industrial Light And Magic Academy Software Foundation OpenEXR is an image file format for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation A buffer overflow vulnerability exists in OpenEXR, which can be exploited by remote attackers to submit special file...

5.5CVSS3.4AI score0.01148EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2020/12/09 12:00 a.m.•32 views

Industrial Light And Magic OpenEXR code-related vulnerabilities

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

5.5CVSS6.9AI score0.01219EPSS
SaveExploits1References9
CNVD
CNVD
•added 2020/11/20 12:00 a.m.•7 views

Binary vulnerability in FFmpeg tiff format

FFmpeg is a set of open source computer programs that can be used to record and convert digital audio and video into streams. A binary vulnerability exists in the FFmpeg tiff format, which can be exploited by attackers to cause a denial-of-service attack...

6.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2020/07/22 12:40 p.m.•12 views

OpenJDK: Excessive memory usage in ImageIO TIFF plugin (ImageIO, 8233239)

Vulnerability in the Java SE product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of...

5.3CVSS5.9AI score0.05166EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/07/07 12:00 a.m.•18 views

PHP EXIF Process Buffer Overflow

The vulnerability of the exifprocessSOFn function in the EXIF interpreter for the PHP programming language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.5CVSS7.1AI score0.06183EPSS
SaveExploits1References14Affected Software5
RedHat Linux
RedHat Linux
•added 2020/03/31 8:15 p.m.•14 views

ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file

An infinite loop has been found in the way ImageMagick reads Multiple-image Network Graphics MNG data. An attacker could exploit this to cause a denial of service via crafted MNG file...

6.5CVSS5.7AI score0.03067EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2020/03/25 12:00 a.m.•18 views

Foxit Studio Photo Buffer Overflow

The vulnerability of the Foxit Studio Photo graphic editor is related to writing code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF forma...

7.8CVSS7.9AI score0.11057EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/03/25 12:00 a.m.•18 views

Foxit Studio Photo Memory Use-After-Free

The vulnerability of the Foxit Studio Photo graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability allows a hacker to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF format file...

7.8CVSS7.7AI score0.11057EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2020/03/18 12:00 a.m.•16 views

Foxit Studio Photo Resource Management Error Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A resource management error vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which originates from the program failing to veri...

8.8CVSS7.7AI score0.11057EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/18 12:00 a.m.•21 views

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18403)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which results from the program failing to properly validate...

8.8CVSS8AI score0.11057EPSS
SaveExploits0References1
Rows per page
Query Builder