Lucene search
K

2680 matches found

Veracode
Veracode
added 2020/04/10 12:30 a.m.26 views

Denial Of Service (DoS)

java is vulnerable to denial of service DoS. The vulnerability exists as a null pointer dereference flaw was found in LittleCMS. An application using color profiles could crash while converting a specially-crafted image file...

4.3CVSS2.1AI score0.04852EPSS
Exploits0References30Affected Software1
Veracode
Veracode
added 2020/04/10 12:30 a.m.31 views

Arbitrary Code Execution

lcms is vulnerable to arbitrary code execution. The vulnerability exists in the way LittleCMS handled color profiles. An attacker could use these flaws to create a specially-crafted image file which could cause a Java application to crash or, possibly, execute arbitrary code when opened...

9.3CVSS2.7AI score0.05027EPSS
Exploits2References44Affected Software2
Veracode
Veracode
added 2020/04/10 12:30 a.m.28 views

Arbitrary Code Execution

lcms is vulnerable to arbitrary code execution. The vulnerability exists in the way LittleCMS handled color profiles. An attacker could use these flaws to create a specially-crafted image file which could cause a Java application to crash or, possibly, execute arbitrary code when opened...

9.3CVSS2.7AI score0.05534EPSS
Exploits2References44Affected Software2
Veracode
Veracode
added 2020/04/10 12:16 a.m.12 views

Integer Overflow

The GIMP GNU Image Manipulation Program is vulnerable to Integer Overflow. An attacker could create a carefully crafted image file that could cause The GIMP to crash or possibly execute arbitrary code if the file was opened by a victim...

6.8CVSS3.9AI score0.05597EPSS
Exploits0References29Affected Software1
Veracode
Veracode
added 2020/04/10 12:16 a.m.18 views

Integer Overflow

The GIMP GNU Image Manipulation Program is vulnerable to Integer Overflow. An attacker could create a carefully crafted image file that could cause The GIMP to crash or possibly execute arbitrary code if the file was opened by a victim...

6.8CVSS3.9AI score0.07169EPSS
Exploits0References32Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.3 views

The vulnerability of the exif_process_IFDTag function in the PHP programming language allows a perpetrator to gain unauthorized access to information or cause service failures.

The vulnerability of the exifprocessIFDTagName function in the PHP programming language is related to the execution of an operation that exceeds the permissible buffer data limits. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information or cause servic...

9.4CVSS7AI score0.04016EPSS
Exploits0References14Affected Software6
RedhatCVE
RedhatCVE
added 2020/04/02 8:18 a.m.28 views

CVE-2018-17101

An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS4AI score0.03156EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2020/04/02 8:18 a.m.29 views

CVE-2018-17100

An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS5.1AI score0.02466EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.3 views

ImageMagick: out-of-bounds write in InsertRow function in coders/cut.c

The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write...

6.5CVSS5.9AI score0.03037EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.2 views

ImageMagick: excessive iteration in the DecodeLabImage and EncodeLabImage functions in coders/tiff.c

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

6.5CVSS5.8AI score0.03277EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.3 views

ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file

An infinite loop has been found in the way ImageMagick reads Multiple-image Network Graphics MNG data. An attacker could exploit this to cause a denial of service via crafted MNG file...

6.5CVSS5.7AI score0.03174EPSS
Exploits1References4
Veracode
Veracode
added 2020/03/27 1:17 p.m.35 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. A flaw in MagickWand/mogrify.c causes memory leaks, allowing an attacker to input a malicious image file to trigger an application crash...

6.5CVSS3.6AI score0.02183EPSS
Exploits1References7Affected Software5
Veracode
Veracode
added 2020/03/27 1:3 p.m.40 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The attack exists because the function WriteTIFFImage of coders/tiff.c causes memory leaks in AcquireMagickMemory , allowing an attacker to input a malicious image file to trigger a heap-based buffer over-read...

8.1CVSS4.4AI score0.03708EPSS
Exploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.2 views

The vulnerability of the Foxit Studio Photo graphic editor lies in the ability to write code beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit Studio Photo graphic editor is related to writing code beyond the buffer boundaries in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF forma...

7.8CVSS7.9AI score0.11057EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.1 views

The vulnerability of the Foxit Studio Photo graphic editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit Studio Photo graphic editor is related to the use of memory after it is freed. Exploiting this vulnerability allows a hacker to execute arbitrary code on the target system by having the user open a specially crafted malicious page or a TIF format file...

7.8CVSS7.7AI score0.11057EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2020/03/18 12:0 a.m.1 views

Foxit Studio Photo Resource Management Error Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A resource management error vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which originates from the program failing to veri...

8.8CVSS7.7AI score0.11057EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/18 12:0 a.m.2 views

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18403)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which results from the program failing to properly validate...

8.8CVSS8AI score0.11057EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/03/13 12:0 a.m.24 views

EulerOS Virtualization for ARM 64 3.0.2.0 : netpbm (EulerOS-SA-2020-1255)

According to the version of the netpbm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The pmmallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial ...

5.5CVSS5.9AI score0.01717EPSS
Exploits1References2
CNVD
CNVD
added 2020/02/13 12:0 a.m.1 views

Denial of Service Vulnerability in FreeImage TIFF Files

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A denial of service vulnerability exists in the FreeImage image parsing library when parsing meta information ...

6.7AI score
Exploits0
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for netpbm (EulerOS-SA-2019-2426)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.01926EPSS
Exploits2References2
Rows per page
Query Builder