Lucene search
K

2680 matches found

UbuntuCve
UbuntuCve
added 2008/11/10 4:15 p.m.27 views

CVE-2008-5032

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, bu...

9.3CVSS6.3AI score0.10671EPSS
Exploits1References3
Prion
Prion
added 2008/11/10 4:15 p.m.15 views

Stack overflow

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, bu...

9.3CVSS7.9AI score0.41444EPSS
Exploits11References13Affected Software1
Cvelist
Cvelist
added 2008/11/10 4:0 p.m.32 views

CVE-2008-5032

Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, bu...

7.5AI score0.10671EPSS
Exploits1References13
Tenable Nessus
Tenable Nessus
added 2008/11/10 12:0 a.m.37 views

VLC Media Player 0.5.0 to 0.9.5 Stack-Based Buffer Overflows

A version of VLC between 0.5.0 and 0.9.5 is installed on the remote host. Such versions are affected by the following vulnerabilities : - RealText subtitle file modules\demux\subtitle.c processing is susceptible to a buffer overflow caused by user-supplied data from a malicious subtitle file bein...

9.3CVSS6.2AI score0.41444EPSS
Exploits11References7
UbuntuCve
UbuntuCve
added 2008/10/31 12:0 a.m.26 views

CVE-2008-4799

pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service crash via a crafted image file that triggers an out-of-bounds read...

4.3CVSS5.9AI score0.01658EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2008/10/13 12:0 a.m.40 views

FreeBSD : cups -- multiple vulnerabilities (ce29ce1d-971a-11dd-ab7e-001c2514716c)

The release note of cups 1.3.9 reports : It contains the following fixes : - SECURITY: The HP-GL/2 filter did not range check pen numbers STR 2911 - SECURITY: The SGI image file reader did not range check 16-bit run lengths STR 2918 - SECURITY: The text filter did not range check cpi, lpi, or...

10CVSS6.6AI score0.24132EPSS
Exploits1References4
FreeBSD
FreeBSD
added 2008/10/09 12:0 a.m.33 views

cups -- multiple vulnerabilities

The release note of cups 1.3.9 reports: It contains the following fixes: SECURITY: The HP-GL/2 filter did not range check pen numbers STR 2911 SECURITY: The SGI image file reader did not range check 16-bit run lengths STR 2918 SECURITY: The text filter did not range check cpi, lpi, or column valu...

10CVSS7.1AI score0.24132EPSS
Exploits1
OSV
OSV
added 2008/10/02 6:18 p.m.1 views

DEBIAN-CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

9.3CVSS7.7AI score0.03214EPSS
Exploits0References1
NVD
NVD
added 2008/10/02 6:18 p.m.20 views

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

9.3CVSS8.4AI score0.03214EPSS
Exploits0References14
Prion
Prion
added 2008/10/02 6:18 p.m.16 views

Integer overflow

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

9.3CVSS6.2AI score0.03214EPSS
Exploits0References14Affected Software1
Cvelist
Cvelist
added 2008/10/02 6:0 p.m.25 views

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

5.1AI score0.03214EPSS
Exploits0References14
Debian CVE
Debian CVE
added 2008/10/02 6:0 p.m.30 views

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

9.3CVSS5.1AI score0.03214EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2008/10/02 12:0 a.m.22 views

CVE-2008-3520

Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...

9.3CVSS7.1AI score0.03214EPSS
Exploits0References3
Prion
Prion
added 2008/09/24 8:37 p.m.17 views

Information disclosure

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...

5CVSS5.9AI score0.01662EPSS
Exploits1References35Affected Software2
UbuntuCve
UbuntuCve
added 2008/09/24 12:0 a.m.25 views

CVE-2008-4069

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...

5CVSS5.9AI score0.01662EPSS
Exploits1References3
NVD
NVD
added 2008/09/11 1:11 a.m.21 views

CVE-2008-3012

gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006,...

9.3CVSS7.8AI score0.31037EPSS
Exploits1References9
Prion
Prion
added 2008/09/11 1:11 a.m.20 views

Buffer overflow

Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digita...

9.3CVSS8.4AI score0.36722EPSS
Exploits1References9Affected Software14
NVD
NVD
added 2008/09/11 1:1 a.m.19 views

CVE-2007-5348

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite...

9.3CVSS8.2AI score0.52886EPSS
Exploits1References10
Prion
Prion
added 2008/09/11 1:1 a.m.20 views

Integer overflow

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite...

9.3CVSS8.6AI score0.52886EPSS
Exploits1References10Affected Software15
Cvelist
Cvelist
added 2008/09/10 3:0 p.m.23 views

CVE-2008-3014

Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digita...

8AI score0.36722EPSS
Exploits1References9
Rows per page
Query Builder