Lucene search
+L

336 matches found

CNNVD
CNNVD
added 2022/08/16 12:0 a.m.5 views

XPDF 安全漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that originates from /xpdf/Lexer.cc in Lexer::getObjObject contains a global buffer overflow...

7.8CVSS7.8AI score0.00324EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.4 views

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a buffer error vulnerability that originates from DCTStream::getChar in /xpdf/Stream.cc contains a heap buffer overflow...

7.8CVSS7.8AI score0.00328EPSS
Exploits1References2
Microsoft CVE
Microsoft CVE
added 2022/05/19 7:0 a.m.5 views

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit b4e79bfa.

...

5.5CVSS6.7AI score0.01684EPSS
Exploits1
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.6 views

Xpdf 安全漏洞

Xpdf is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. A security vulnerability exists in Xpdf version 4.04, which stems from an excessive memory allocation when displaying well-designed input...

5.5CVSS6.5AI score0.00804EPSS
Exploits1References2
OSV
OSV
added 2022/05/11 3:15 p.m.4 views

DEBIAN-CVE-2022-1622

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa...

5.5CVSS6.5AI score0.01684EPSS
Exploits1References1
OSV
OSV
added 2022/05/11 3:15 p.m.14 views

AZL-9734 CVE-2022-1623 affecting package libtiff for versions less than 4.4.0-1

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa...

5.5CVSS6.7AI score0.0122EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/05/10 12:0 a.m.3 views

Silicon Graphics LibTIFF 缓冲区错误漏洞

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for working with TIFF files. A security vulnerability exists in Silicon Graphics LibTIFF. An attacker could use this...

5.5CVSS6.9AI score0.01684EPSS
Exploits1References23
ATTACKERKB
ATTACKERKB
added 2022/04/04 11:15 a.m.10 views

CVE-2022-24191

In HTMLDOC 1.9.14, an infinite loop in the gifreadlzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow...

5.5CVSS6.9AI score0.00727EPSS
Exploits1References4
OSV
OSV
added 2022/04/04 11:15 a.m.1 views

DEBIAN-CVE-2022-24191

In HTMLDOC 1.9.14, an infinite loop in the gifreadlzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow...

5.5CVSS6.8AI score0.00727EPSS
Exploits1References1
OSV
OSV
added 2022/04/04 11:15 a.m.4 views

UBUNTU-CVE-2022-24191

In HTMLDOC 1.9.14, an infinite loop in the gifreadlzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow...

5.5CVSS7AI score0.00727EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/04/04 12:0 a.m.5 views

HTMLDOC 安全漏洞

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC version 1.9.14, which stems from an infinite loop in the application's gifreadlzw function that can cause a pointer to arbitrarily...

5.5CVSS7AI score0.00727EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/04/04 12:0 a.m.11 views

PT-2022-16532 · Htmldoc +5 · Htmldoc +5

Name of the Vulnerable Software and Affected Versions: HTMLDOC version 1.9.14 Description: The issue is caused by an infinite loop in the gif read lzw function, which can lead to a pointer arbitrarily pointing to heap memory, resulting in a buffer overflow. Recommendations: For HTMLDOC version...

10CVSS6.6AI score0.21514EPSS
Exploits21References91
OSV
OSV
added 2022/01/12 1:15 p.m.4 views

ALPINE-CVE-2021-44648

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12...

8.8CVSS7.4AI score0.01891EPSS
Exploits1References1
OSV
OSV
added 2022/01/12 1:15 p.m.1 views

DEBIAN-CVE-2021-44648

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12...

8.8CVSS8AI score0.01891EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/01/12 1:15 p.m.27 views

CVE-2021-44648

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12...

8.8CVSS7.2AI score0.01891EPSS
Exploits1References3
Prion
Prion
added 2022/01/12 1:15 p.m.17 views

Heap overflow

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12...

6.8CVSS8.5AI score0.01891EPSS
Exploits1References5Affected Software3
Debian CVE
Debian CVE
added 2022/01/12 12:31 p.m.26 views

CVE-2021-44648

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12...

8.8CVSS8.8AI score0.01891EPSS
Exploits1
CNNVD
CNNVD
added 2022/01/12 12:0 a.m.4 views

gdk-pixbuf 缓冲区错误漏洞

gdk-pixbuf is an image loading library. A security vulnerability exists in gdk-pixbuf 2.42.6, which originates from a heap buffer overflow vulnerability when decoding lzw compressed image data streams in GIF files with lzw minimum code size equal to 12...

8.8CVSS8.2AI score0.01891EPSS
Exploits1References9
GitLab Advisory Database
GitLab Advisory Database
added 2022/01/12 12:0 a.m.31 views

Out-of-bounds Write

GNOME gdk-pixbuf is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals 12...

8.8CVSS3.1AI score0.01891EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/12/28 12:0 a.m.3 views

PT-2021-24313 · Gif2Apng +2 · Gif2Apng +2

Name of the Vulnerable Software and Affected Versions: gif2apng version 1.9 Description: A heap-based buffer overflow issue was found in the DecodeLZW function, allowing an attacker to write a large amount of arbitrary data outside the boundaries of a buffer. Recommendations: For gif2apng version...

7.8CVSS7.6AI score0.00871EPSS
Exploits3References21
Rows per page
Query Builder