Lucene search
+L

2792 matches found

OSV
OSV
added 2019/05/20 4:29 p.m.9 views

UBUNTU-CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

7.5CVSS7.2AI score0.0421EPSS
SaveExploits1References5
exploitpack
exploitpack
added 2019/05/20 12:00 a.m.84 views

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow Huawei eSpace Meeting Image File Format Handling Buffer Overflow Vulnerability Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop,...

2.1CVSS0.7AI score0.00641EPSS
SaveExploits3
Exploit DB
Exploit DB
added 2019/05/20 12:00 a.m.258 views

Huawei eSpace 1.1.11.103 - Image File Format Handling Buffer Overflow

Huawei eSpace Meeting Image File Format Handling Buffer Overflow Vulnerability Vendor: Huawei Technologies Co., Ltd. Product web page: https://www.huawei.com Affected version: eSpace 1.1.11.103 aka eSpace ECS, eSpace Desktop, eSpace Meeting, eSpace UC Summary: Create more convenient Enhanced...

2.1CVSS5.2AI score0.00641EPSS
SaveExploits3
Mageia
Mageia
added 2019/05/19 11:27 a.m.28 views

Updated netpbm packages fix security vulnerability

The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file CVE-2018-8975...

5.5CVSS5.2AI score0.01659EPSS
SaveExploits1References2
Veracode
Veracode
added 2019/05/10 9:13 a.m.31 views

Remote Code Execution (RCE)

Typo3/Cms is vulnerable to remote code execution. Improper configuration of the applications used for image processing allows an attacker to execute arbitrary code on the server by uploading a malicious image file containing PostScript code...

7.5CVSS8.1AI score0.03917EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/05/10 12:00 a.m.57 views

ImageMagick < 7.0.8-44 Multiple vulnerabilities

The version of ImageMagick installed on the remote Windows host is 7.x prior to 7.0.8-44. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability exists due to a failure to handle exceptional conditions. An unauthenticated, remote attacker can exploit this by...

8.8CVSS7.5AI score0.05916EPSS
SaveExploits6References12
RedhatCVE
RedhatCVE
added 2019/05/02 9:13 a.m.33 views

CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

8.1CVSS3.5AI score0.03708EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2019/05/02 9:13 a.m.45 views

CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

8.1CVSS3.3AI score0.04057EPSS
SaveExploits1References3
Veracode
Veracode
added 2019/05/02 6:10 a.m.35 views

Denial Of Service (DoS)

JasPer is vulnerable to denial of service attacks. A remote attacker could cause denial of service through assertion failure via a crafted image file. Affected by this issue is the function jpcpinextrpcl in jpct2cod.c...

5.5CVSS5.9AI score0.01932EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2019/05/02 6:10 a.m.21 views

Denial Of Service (DoS)

JasPer is vulnerable to denial of service attacks. A remote attacker could cause denial of service through assertion failure via a crafted image file. Affected by this issue is the function rasgetcmap in rasdec.c...

5.5CVSS5.9AI score0.01951EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2019/05/02 6:10 a.m.37 views

Denial Of Service (DoS)

JasPer is vulnerable to denial of serviceDoS attacks. A user can exploit a flaw in the jpcdectiledecode function in jpcdec.c which allows a remote attacker to have unspecified impact via a crafted image file. This leads to heap-based-buffer overflow that may result in application crash...

7.8CVSS6.5AI score0.02049EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
added 2019/05/02 4:57 a.m.45 views

Buffer Overflow

KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager. Multiple integer...

8.6CVSS7.3AI score0.0101EPSS
SaveExploits3References26Affected Software2
Veracode
Veracode
added 2019/05/02 4:43 a.m.46 views

Denial Of Service (DoS)

The libexif packages provide an Exchangeable image file format Exif library. Exif allows metadata to be added to and read from certain types of image files. Multiple flaws were found in the way libexif processed Exif tags. An attacker could create a specially-crafted image file that, when opened ...

7.5CVSS6.7AI score0.07557EPSS
SaveExploits0References10Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/04/30 12:00 a.m.38 views

EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-1298)

According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to...

8.8CVSS7.6AI score0.05916EPSS
SaveExploits1References2
OSV
OSV
added 2019/04/29 4:29 p.m.28 views

CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

8.1CVSS6.9AI score
SaveExploits0References8
OSV
OSV
added 2019/04/29 4:29 p.m.7 views

ALPINE-CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

8.1CVSS6.8AI score0.03708EPSS
SaveExploits1References1
NVD
NVD
added 2019/04/29 4:29 p.m.28 views

CVE-2019-11598

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

8.1CVSS8.7AI score0.04057EPSS
SaveExploits1References8
Prion
Prion
added 2019/04/29 4:29 p.m.29 views

Heap overflow

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

5.8CVSS8.4AI score0.04057EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2019/04/29 4:29 p.m.27 views

CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

8.1CVSS6.9AI score
SaveExploits0References8
NVD
NVD
added 2019/04/29 4:29 p.m.27 views

CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

8.1CVSS7.8AI score0.03708EPSS
SaveExploits1References8
Rows per page
Query Builder