Lucene search
K

2249 matches found

OSV
OSV
added 2017/04/09 12:0 a.m.3 views

UBUNTU-CVE-2017-7598

tifdirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...

7.8CVSS7AI score0.02495EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.5 views

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the WriteProfile function in the coder/jpeg.c file of the console-based graphic editor ImageMagick is caused by buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure termination of the application using a speciall...

6.8CVSS7.1AI score0.02018EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2017/03/23 6:59 p.m.21 views

CVE-2016-9557

Integer overflow in jasimage.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service application crash via a crafted file...

5.5CVSS5.4AI score0.01863EPSS
Exploits0References5
CNVD
CNVD
added 2017/03/20 12:0 a.m.3 views

Memory Corruption Vulnerability in GIF Image Processing by Universal Picture Viewer

Universal Picture Viewer is a picture viewing software. Universal Picture Viewer has a memory corruption vulnerability when dealing with GIF format images, which allows an attacker to construct a malformed GIF format that can cause the program to crash, and if successfully exploited, can lead to...

8AI score
Exploits0
CNVD
CNVD
added 2017/03/16 12:0 a.m.2 views

ImageMagick Denial of Service Vulnerability (CNVD-2017-03844)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability in encoder/ pict.c in versions prior to ImageMagick 7.0.5-0 allows remote attackers ...

6.5CVSS8.6AI score0.02902EPSS
Exploits0References1
NVD
NVD
added 2017/03/15 7:59 p.m.16 views

CVE-2017-5849

tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted tiff image file, related to transposing width and height values...

5.5CVSS5.4AI score0.01926EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2017/03/15 7:0 p.m.17 views

CVE-2017-5849

tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service out-of-bounds read and write via a crafted tiff image file, related to transposing width and height values...

5.5CVSS5.5AI score0.01926EPSS
Exploits1
Prion
Prion
added 2017/03/15 2:59 p.m.20 views

Integer overflow

Integer overflow in the jpcdectiledecode function in jpcdec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow...

6.8CVSS7.7AI score0.02049EPSS
Exploits1References5Affected Software1
Fedora
Fedora
added 2017/03/11 11:52 a.m.30 views

[SECURITY] Fedora 24 Update: GraphicsMagick-1.3.25-6.fc24

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

9.8CVSS2.7AI score0.03905EPSS
Exploits0
Fedora
Fedora
added 2017/03/09 1:24 p.m.40 views

[SECURITY] Fedora 25 Update: GraphicsMagick-1.3.25-6.fc25

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

9.8CVSS2.7AI score0.03905EPSS
Exploits0
Ubuntu
Ubuntu
added 2017/02/28 6:31 p.m.230 views

USN-3213-1: GD library vulnerabilities

Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbitrary code. This issue only affected...

9.8CVSS7.2AI score0.10687EPSS
Exploits0
OSV
OSV
added 2017/02/27 10:59 p.m.1 views

DEBIAN-CVE-2015-8900

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service infinite loop via a crafted HDR file...

5.5CVSS6.3AI score0.01743EPSS
Exploits1References1
OPENSUSE Linux
OPENSUSE Linux
added 2017/02/19 6:8 p.m.95 views

Security update for java-1_7_0-openjdk (important)

This update for java-170-openjdk fixes the following issues: - Oracle Critical Patch Update of January 2017 to OpenJDK 7u131 bsc1020905: Security Fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution -...

6.8CVSS6.9AI score0.95707EPSS
Exploits13References1
OSV
OSV
added 2017/02/17 7:59 a.m.4 views

CVE-2017-5014

Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

6.3CVSS7.6AI score0.0136EPSS
Exploits0References7
NVD
NVD
added 2017/02/17 7:59 a.m.15 views

CVE-2017-5014

Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

6.8CVSS7AI score0.0136EPSS
Exploits0References7
Prion
Prion
added 2017/02/17 7:59 a.m.15 views

Heap overflow

Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

6.8CVSS6.7AI score0.0136EPSS
Exploits0References7Affected Software1
CVE
CVE
added 2017/02/17 7:45 a.m.93 views

CVE-2017-5014

CVE-2017-5014 is a heap overflow in the Skia component of Google Chromium/Chromium-based browsers. Affected: Chromium before 56.0.2924.76 (Linux/Windows/Mac) and Android builds (56.0.2924.87). Impact: remote attacker could trigger out-of-bounds memory access through a crafted HTML page, potential...

6.8CVSS6.7AI score0.0136EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2017/02/17 7:45 a.m.22 views

CVE-2017-5014

Removed by vendor...

6.8CVSS8AI score0.0136EPSS
Exploits0
Cvelist
Cvelist
added 2017/02/17 7:45 a.m.17 views

CVE-2017-5014

Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

6.9AI score0.0136EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2017/02/09 12:0 a.m.5 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.

The vulnerability in the image conversion module of PDF viewer programs such as Adobe Reader, Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a...

9.3CVSS8.1AI score0.0299EPSS
Exploits0References3Affected Software2
Rows per page
Query Builder