Lucene search
+L

322 matches found

CNVD
CNVD
•added 2020/02/13 12:00 a.m.•7 views

Denial of Service Vulnerability in FreeImage TIFF Files

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A denial of service vulnerability exists in the FreeImage image parsing library when parsing meta information ...

6.7AI score
SaveExploits0
osv_pysec
osv_pysec
•added 2020/01/03 1:15 a.m.•16 views

PYSEC-2020-81

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS6.8AI score0.01975EPSS
SaveExploits0References6
PyPA
PyPA
•added 2020/01/03 1:15 a.m.•16 views

PYSEC-2020-81

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS6.9AI score0.01975EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
•added 2019/12/02 12:00 a.m.•21 views

Free Photo Viewer Code Issue Vulnerability

Free Photo Viewer is a lightweight photo viewer. A code issue vulnerability exists in Free Photo Viewer. The vulnerability can be exploited to execute arbitrary code via specially crafted BMP and/or TIFF files...

7.8CVSS7.8AI score0.01734EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•18 views

Blender Full Integer Overflow Code Execution

The vulnerability of Blender’s software for creating 3D computer graphics arises from a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created TIFF file...

7.8CVSS7.8AI score0.01782EPSS
SaveExploits1References7Affected Software2
osv_cve
osv_cve
•added 2019/11/06 8:15 p.m.•25 views

CVE-2019-5084

An exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of LEADTOOLS 20. A specially crafted TIF image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a TIF ima...

7.8CVSS7.2AI score0.01996EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/11/01 12:00 a.m.•7 views

Memory corruption vulnerability in XnView ldf files

XnView from France is a great image viewer with image viewer, screen capture, slideshow, thumbnail maker, batch conversion, hexadecimal browsing, drag-and-drop, address book, scanning input, etc. It supports more than 100 image formats, and more than 500 images after installing plug-ins. XnView l...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/27 12:00 a.m.•13 views

Memory Corruption Vulnerability in TIFF Image Processing by Good123 Photo King

Good123 Viewer is an image viewing software. A memory corruption vulnerability exists in the handling of TIFF images by Good123 Viewer, which can be exploited by attackers to cause the program to crash by constructing malformed TIFF images...

7AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/10 12:00 a.m.•12 views

Binary Vulnerability in Exif Pilot

Exif Pilot is a free EXIF editor from Two Pilots. A binary vulnerability exists in Exif Pilot's handling of the TIFF format, which can be exploited by an attacker to cause the program to crash by constructing a malformed TIFF-formatted image...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/06 12:00 a.m.•17 views

Binary Vulnerability in Flying Pigeon Network Printing Component (CNVD-2019-33149)

Flying Pigeon is a LAN instant messaging software for enterprises, schools and families, realizing high-speed transmission of messages and files within LAN and printing on Flying Pigeon network. A binary vulnerability exists in the Flying Pigeon Network Printing component, which can be exploited ...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2019/08/26 12:00 a.m.•13 views

Binary Vulnerability in Windshade Viewer FyPicViewer.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/08/26 12:00 a.m.•15 views

Binary Vulnerability in Windshade Viewer FyPicEditor.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

6.9AI score
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2019/05/20 4:29 p.m.•17 views

UBUNTU-CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS7.4AI score0.0421EPSS
SaveExploits1References5
osv_ubuntu
osv_ubuntu
•added 2019/05/20 4:29 p.m.•11 views

UBUNTU-CVE-2019-12212

When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file...

7.5CVSS5.8AI score0.01897EPSS
SaveExploits1References3
exploitpack
exploitpack
•added 2019/05/20 12:00 a.m.•92 views

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow Huawei eSpace Meeting Image File Format Handling Buffer Overflow Vulnerability Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop,...

2.1CVSS0.7AI score0.00641EPSS
SaveExploits3
Exploit DB
Exploit DB
•added 2019/05/20 12:00 a.m.•270 views

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow

Huawei eSpace Meeting Image File Format Handling Buffer Overflow Vulnerability Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop, eSpace Meeting, eSpace UC Summary: Create more convenient Enhanced...

2.1CVSS5.2AI score0.00641EPSS
SaveExploits3
Veracode
Veracode
•added 2019/05/02 4:43 a.m.•52 views

Denial Of Service (DoS)

The libexif packages provide an Exchangeable image file format Exif library. Exif allows metadata to be added to and read from certain types of image files. Multiple flaws were found in the way libexif processed Exif tags. An attacker could create a specially-crafted image file that, when opened ...

7.5CVSS6.7AI score0.07619EPSS
SaveExploits0References10Affected Software1
CNVD
CNVD
•added 2019/04/19 12:00 a.m.•18 views

Foxit Studio Photo Information Disclosure Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of TIF files in Foxit Studio Photo 3.6.6.779 and prior versions, which is caused by the program failing to properly validate user-submitted data. An attacker...

5.5CVSS6.6AI score0.02649EPSS
SaveExploits0References1
Gentoo Linux
Gentoo Linux
•added 2019/04/15 12:00 a.m.•81 views

libTIFF: Denial of service

Background The TIFF library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE applications, to interpret TIFF images. Description Please review the CVE identifier referenced below for details. Impact Please review the...

8.8CVSS2.7AI score0.1496EPSS
SaveExploits4
osv_alpine
osv_alpine
•added 2019/01/11 5:29 a.m.•10 views

ALPINE-CVE-2019-6128

The TIFFFdOpen function in tifunix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb...

8.8CVSS7AI score0.03851EPSS
SaveExploits1References1
Rows per page
Query Builder