Lucene search
+L

957 matches found

CNNVD
CNNVD
added 2021/05/17 12:00 a.m.11 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:46 to exploit the vulnerability and cause a heap buffer overflow...

8.8CVSS6.2AI score0.01133EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.7 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via the htmlwescape ... /... /programs/escape.c:97 to exploit the vulnerability and cause a heap buffer overflo...

8.8CVSS6.2AI score0.01073EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.19 views

PT-2021-10685

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The problem is related to the bit search sentinel function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, consider updating...

8.8CVSS7.4AI score0.01073EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.10 views

PT-2021-10684

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: An issue in GNU LibreDWG leads to a memory leak when crafted input is processed by the dwg decode eed function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there i...

6.5CVSS6.5AI score0.00921EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.11 views

PT-2021-10670

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A null pointer dereference issue exists, which causes a denial of service, resulting in an application crash. The issue is located in the dwg2SVG.c file. Recommendations: For GNU LibreDWG version...

6.5CVSS6.5AI score0.00911EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/05/17 12:00 a.m.18 views

PT-2021-10673

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists. The problem is located in the htmlescape function in the escape.c file. Recommendations: For GNU LibreDWG version 0.10.2641, consider applying a patch or f...

8.8CVSS7.4AI score0.01121EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.10 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via the outputTEXT ... /... /programs/dwg2SVG.c:114 to cause a heap buffer overflow...

7.8CVSS6.2AI score0.00813EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/05/17 12:00 a.m.9 views

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004sectionrevhistory ... /... /src/decode.c:3051 to exploit the vulnerability and cause a heap buffer...

8.8CVSS6.2AI score0.01133EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/07/22 12:00 a.m.8 views

GNU LibreDWG Heap Buffer Overflow Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the dwgencodeentity of the commonentitydata.spec file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from a networked system or product performing operations in memory withou...

8.1CVSS7.4AI score0.01245EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/07/22 12:00 a.m.9 views

GNU LibreDWG Denial of Service Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the bitcalcCRC of the bits.c file in GNU LibreDWG version 0.9.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

6.5CVSS6.7AI score0.01019EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/07/22 12:00 a.m.10 views

GNU LibreDWG Null Pointer Dereference Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A resource management error vulnerability exists in GNU LibreDWG versions prior to 0.11. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. An...

6.5CVSS6.8AI score0.01495EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/07/22 12:00 a.m.8 views

GNU LibreDWG Resource Management Error Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A resource management error vulnerability exists in the 'dwgencodeLWPOLYLINE' function of the dwg.spec file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from mismanagement of system resources e.g., memory,...

7.5CVSS7AI score0.01619EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/07/22 12:00 a.m.9 views

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-41850)

GNU LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in the decodeR13R2000 of the decode.c file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from a networked system or product performing operations in memory without...

8.1CVSS7.3AI score0.01245EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/07/20 12:00 a.m.3 views

GNU LibreDWG bits.c buffer overflow vulnerability

GNU LibreDWG is a C language library for working with DWG files. A buffer overflow vulnerability exists in GNU LibreDWG bits.c, which can be exploited by a remote attacker to submit a specially crafted malicious file that can be tricked into parsing to execute arbitrary code in the context of an...

8.1AI score
SaveExploits0References1
CNVD
CNVD
added 2020/07/19 12:00 a.m.13 views

GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2021-01288)

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the bitwriteTF of the bits.c file in GNU LibreDWG version 0.9.3 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly...

8.1CVSS7.3AI score0.01245EPSS
SaveExploits1References1
NVD
NVD
added 2020/07/17 4:15 p.m.20 views

CVE-2020-15807

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...

6.5CVSS0.01495EPSS
SaveExploits1References3
OSV
OSV
added 2020/07/17 4:15 p.m.21 views

CVE-2020-15807

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...

6.5CVSS6.8AI score
SaveExploits0References3
Prion
Prion
added 2020/07/17 4:15 p.m.20 views

Null pointer dereference

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...

4.3CVSS6.5AI score0.01495EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2020/07/17 3:35 p.m.56 views

CVE-2020-15807

GNU LibreDWG (C library) prior to version 0.11 is affected by a NULL pointer dereference when processing crafted input files. This vulnerability, CVE-2020-15807, is documented across multiple feeds (NVD entry notes a NULL pointer dereference; Red Hat/SUSE/CNVD mirrors echo the same description). ...

6.5CVSS6.4AI score0.01495EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2020/07/17 3:35 p.m.28 views

CVE-2020-15807

GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...

6.5AI score0.01495EPSS
SaveExploits1References3
Rows per page
Query Builder