Lucene search
K

2680 matches found

Debian CVE
Debian CVE
added 2018/09/19 10:0 p.m.30 views

CVE-2018-17230

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

6.5CVSS6.7AI score0.01903EPSS
Exploits1
Cvelist
Cvelist
added 2018/09/19 10:0 p.m.23 views

CVE-2018-17229

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

6.3AI score0.01903EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2018/09/18 12:0 a.m.4 views

The vulnerability of the Windows operating system, related to errors in image processing, allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in processing image files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted image file from a remote location...

10CVSS8.3AI score0.14646EPSS
Exploits0References2
CNVD
CNVD
added 2018/09/18 12:0 a.m.3 views

jhead denial of service vulnerability (CNVD-2018-19092)

jhead is a tool for modifying JPEG file information. A denial of service vulnerability exists in the 'ProcessGpsInfo' function of the gpsinfo.c file in jhead version 3.00, which can be exploited by remote attackers to cause a denial of service with the help of a malicious JPEG file...

7.8CVSS7.3AI score0.01557EPSS
Exploits1References1
Contao
Contao
added 2018/09/18 12:0 a.m.39 views

Arbitrary code execution in TCPDF

Date : 2018-09-18 CVE ID : CVE-2018-17057 Description CVE-2018-17057 identifies a security vulnerability in TCPDF, which also affects Contao. Through a manipulated image file, a logged in back end user can implant arbitrary code which is executed when an article is exported as PDF in the front en...

9.8CVSS9.1AI score0.26172EPSS
Exploits7Affected Software1
OSV
OSV
added 2018/09/16 9:29 p.m.33 views

CVE-2018-17100

An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS7.5AI score
Exploits0References7
NVD
NVD
added 2018/09/16 9:29 p.m.19 views

CVE-2018-17101

An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS8.9AI score0.03156EPSS
Exploits0References8
Prion
Prion
added 2018/09/16 9:29 p.m.31 views

Design/Logic Flaw

An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file...

6.8CVSS8.9AI score0.02466EPSS
Exploits0References7Affected Software3
Cvelist
Cvelist
added 2018/09/16 9:0 p.m.25 views

CVE-2018-17101

An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

8.9AI score0.03156EPSS
Exploits0References8
CVE
CVE
added 2018/09/16 9:0 p.m.186 views

CVE-2018-17101

CVE-2018-17101 affects LibTIFF 4.0.9, with two out-of-bounds writes in cpTags (tiff2bw.c and pal2rgb.c) that can crash the application or have other unspecified impact when processing crafted TIFF images. Affected/affected-family advisories show upstream fixes; remediation is to upgrade LibTIFF t...

8.8CVSS8.9AI score0.03156EPSS
Exploits0References8Affected Software1
AlpineLinux
AlpineLinux
added 2018/09/16 9:0 p.m.31 views

CVE-2018-17100

An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS9.2AI score0.02466EPSS
Exploits0
Debian CVE
Debian CVE
added 2018/09/16 9:0 p.m.28 views

CVE-2018-17100

An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS8.3AI score0.02466EPSS
Exploits0
Debian CVE
Debian CVE
added 2018/09/16 9:0 p.m.30 views

CVE-2018-17101

An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS8.2AI score0.03156EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2018/09/16 9:0 p.m.30 views

CVE-2018-17101

An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS9.1AI score0.03156EPSS
Exploits0
OSV
OSV
added 2018/09/16 5:29 p.m.0 views

UBUNTU-CVE-2018-17088

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a check for whether a location exceeds the EXIF data length. This is...

7.8CVSS6.8AI score0.01557EPSS
Exploits1References3
OSV
OSV
added 2018/09/16 2:29 a.m.3 views

DEBIAN-CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

7.8CVSS7.2AI score0.01766EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2018/09/16 12:0 a.m.29 views

CVE-2018-17100

An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file...

8.8CVSS6.8AI score0.02466EPSS
Exploits0References3
OSV
OSV
added 2018/09/13 12:29 a.m.0 views

CVE-2018-8475

A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serve...

8.8CVSS7.9AI score0.14646EPSS
Exploits0References3
Symantec
Symantec
added 2018/09/11 12:0 a.m.50 views

Microsoft Windows Image File Loading CVE-2018-8475 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected Microsoft Windows ...

0.8AI score0.14646EPSS
Exploits0Affected Software3
RedhatCVE
RedhatCVE
added 2018/09/07 5:49 p.m.23 views

CVE-2018-16643

The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image...

6.5CVSS5.2AI score0.0308EPSS
Exploits0References2
Rows per page
Query Builder