Lucene search
K

1145 matches found

OSV
OSV
added 2019/01/11 5:29 a.m.3 views

DEBIAN-CVE-2019-6131

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svgrunusesymbol, svgrunelement, and svgrunuse, as demonstrated by mutool...

5.5CVSS7AI score0.01538EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2019/01/11 5:29 a.m.22 views

CVE-2019-6131

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svgrunusesymbol, svgrunelement, and svgrunuse, as demonstrated by mutool...

5.5CVSS6.1AI score0.01538EPSS
Exploits1References3
Prion
Prion
added 2019/01/11 5:29 a.m.25 views

Design/Logic Flaw

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svgrunusesymbol, svgrunelement, and svgrunuse, as demonstrated by mutool...

4.3CVSS5.4AI score0.01538EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2019/01/11 5:29 a.m.0 views

UBUNTU-CVE-2019-6131

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svgrunusesymbol, svgrunelement, and svgrunuse, as demonstrated by mutool...

5.5CVSS6AI score0.01538EPSS
Exploits1References4
CVE
CVE
added 2019/01/11 5:0 a.m.64 views

CVE-2019-6131

The CVE-2019-6131 issue affects Artifex MuPDF 1.14.0, exposed via the SVG rendering path. Specifically, svg-run.c contains an infinite recursion with uncontrolled stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, demonstrated by mutool. Impact is described as resource exh...

5.5CVSS5.3AI score0.01538EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2019/01/11 5:0 a.m.25 views

CVE-2019-6131

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svgrunusesymbol, svgrunelement, and svgrunuse, as demonstrated by mutool...

5.5CVSS5.4AI score0.01538EPSS
Exploits1
Cvelist
Cvelist
added 2019/01/11 5:0 a.m.29 views

CVE-2019-6131

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svgrunusesymbol, svgrunelement, and svgrunuse, as demonstrated by mutool...

5.4AI score0.01538EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2019/01/11 12:0 a.m.2 views

PT-2019-17969 · Artifex · Artifex Mupdf

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.14.0 Description: The issue is related to infinite recursion with stack consumption in the svg run use symbol, svg run element, and svg run use functions in the svg-run.c file. This can be demonstrated using mutool...

5.5CVSS5.5AI score0.01538EPSS
Exploits1References13
CNVD
CNVD
added 2019/01/11 12:0 a.m.3 views

Artifex MuPDF Resource Management Error Vulnerability

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in the svgrunusesymbol, svgrunelement, and svgrunuse of the svg-run.c file in Artifex MuPDF version 1.14.0. An attacker can exploit this vulnerability to cause infinite recursion...

5.5CVSS6.8AI score0.01538EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2019/01/08 12:0 a.m.42 views

EulerOS 2.0 SP5 : poppler (EulerOS-SA-2019-1010)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - poppler: out of bounds read in pdfunite CVE-2018-13988 - poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph function allows...

6.5CVSS6.2AI score0.0315EPSS
Exploits2References3
CNVD
CNVD
added 2018/12/24 12:0 a.m.3 views

libpff Denial of Service Vulnerability

libpff is a tool for accessing files in PFF Personal Folder File and OFF Offline Folder File formats. A security vulnerability exists in libpffitemtreecreatenode in the libpffitemtree.c file in versions prior to libpff experimental-20180714. An attacker can exploit this vulnerability to cause a...

5.5CVSS6.6AI score0.00431EPSS
Exploits1References1
Prion
Prion
added 2018/12/22 12:29 a.m.9 views

Design/Logic Flaw

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

1.9CVSS5.3AI score0.00431EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/12/22 12:29 a.m.1 views

UBUNTU-CVE-2018-20348

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

5.5CVSS5.8AI score0.00431EPSS
Exploits1References3
OSV
OSV
added 2018/12/22 12:29 a.m.3 views

DEBIAN-CVE-2018-20348

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

5.5CVSS6.6AI score0.00431EPSS
Exploits1References1
CVE
CVE
added 2018/12/22 12:0 a.m.49 views

CVE-2018-20348

The CVE-2018-20348 entry documents a local-denial-of-service vulnerability in libpff: specifically, libpff_item_tree_create_node in libpff_item_tree.c (before experimental-20180714) can be triggered by a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c. Exploitation would ...

5.5CVSS5.3AI score0.00431EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/12/22 12:0 a.m.16 views

CVE-2018-20348

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

5.3AI score0.00431EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2018/12/22 12:0 a.m.18 views

CVE-2018-20348

libpffitemtreecreatenode in libpffitemtree.c in libpff before experimental-20180714 allows attackers to cause a denial of service infinite recursion via a crafted file, related to libfdatatreegetnodevalue in libfdatatree.c...

5.5CVSS5.3AI score0.00431EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2018/12/19 12:0 a.m.3 views

PT-2023-15458 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev649-ga8f438d20 Description: The issue is caused by infinite recursion in the Media GetSample function, located in isomedia/media.c:662, leading to a segment fault or stack overflow. Recommendations: For GPAC...

9.8CVSS7.4AI score0.04615EPSS
Exploits150References371
NVD
NVD
added 2018/12/12 5:29 p.m.22 views

CVE-2018-20103

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS7.4AI score0.06593EPSS
Exploits0References7
Prion
Prion
added 2018/12/12 5:29 p.m.36 views

Stack overflow

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

5CVSS7.3AI score0.06593EPSS
Exploits0References7Affected Software3
Rows per page
Query Builder