Lucene search
+L

116 matches found

Cvelist
Cvelist
•added 2018/10/26 1:00 p.m.•31 views

CVE-2018-18661

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tiflzw.c...

7.3AI score0.0287EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2018/10/26 1:00 p.m.•32 views

CVE-2018-18661

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tiflzw.c...

6.5CVSS7.7AI score0.0287EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2018/10/26 1:00 p.m.•40 views

CVE-2018-18661

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tiflzw.c...

6.5CVSS7.5AI score0.0287EPSS
SaveExploits1
CVE
CVE
•added 2018/10/26 1:00 p.m.•122 views

CVE-2018-18661

CVE-2018-18661 affects LibTIFF 4.0.9, where a NULL pointer dereference in LZWDecode (tif_lzw.c) can lead to a denial of service (crash) when processing crafted TIFF images. Public advisories and Linux distributions consistently reference this issue as part of a set of LibTIFF vulnerabilities and ...

6.5CVSS7.1AI score0.0287EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/26 12:00 a.m.•3 views

CVE-2018-18661: NULL Pointer Dereference

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tiflzw.c...

6.5CVSS6.3AI score0.0287EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2018/10/26 12:00 a.m.•31 views

CVE-2018-18661

An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tiflzw.c...

6.5CVSS6.8AI score0.0287EPSS
SaveExploits1References2
OSV
OSV
•added 2017/12/20 2:29 p.m.•13 views

CVE-2017-16573

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS5AI score0.02456EPSS
SaveExploits0References2
NVD
NVD
•added 2017/12/20 2:29 p.m.•31 views

CVE-2017-16573

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.2AI score0.02456EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2017/12/20 2:29 p.m.•12 views

CVE-2017-16573

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS4AI score0.02456EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2017/12/20 2:29 p.m.•28 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

4.3CVSS6.5AI score0.02456EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/20 12:00 a.m.•3 views

CVE-2017-16573: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS6.7AI score0.02456EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2017/11/14 12:00 a.m.•31 views

Foxit Reader LZWDecode filter Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.5CVSS6.7AI score0.02456EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2008/09/09 12:00 a.m.•42 views

GLSA-200809-07 : libTIFF: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200809-07 libTIFF: User-assisted execution of arbitrary code Drew Yao Apple Product Security and Clay Wood reported multiple buffer underflows in the LZWDecode and LZWDecodeCompat functions in tiflzw.c when processing TIFF files...

6.8CVSS8.3AI score0.0413EPSS
SaveExploits1References2
Gentoo Linux
Gentoo Linux
•added 2008/09/08 12:00 a.m.•61 views

libTIFF: User-assisted execution of arbitrary code

Background libTIFF provides support for reading and manipulating TIFF Tagged Image File Format images. Description Drew Yao Apple Product Security and Clay Wood reported multiple buffer underflows in the LZWDecode and LZWDecodeCompat functions in tiflzw.c when processing TIFF files. Impact A remo...

6.8CVSS7.3AI score0.0413EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2008/08/27 8:00 p.m.•25 views

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

6.8CVSS7AI score0.0413EPSS
SaveExploits1
CVE
CVE
•added 2008/08/27 8:00 p.m.•148 views

CVE-2008-2327

CVE-2008-2327 affects LibTIFF 3.8.2 and earlier, with multiple buffer underflows in the LZW decoder (LZWDecode, LZWDecodeCompat, LZWDecodeVector) in tif_lzw.c that allow context-dependent attackers to execute arbitrary code via a crafted TIFF file due to improper handling of the CODE_CLEAR. Conne...

6.8CVSS8.2AI score0.0413EPSS
SaveExploits1References47Affected Software1
Rows per page
Query Builder