1059 matches found
CVE-2023-4683-Test
CVE-2023-4683-Test This repo holds an easy to use POC for CVE-2023-4683. Just git clone this repo and either extract webp-test or run setup-webp-test.sh. webp-test already has the necessary files git commit 7ba44f80f3b94fc0138db159afea770ef06532a0 of https://chromium.googlesource.com/webm/libwebp...
cve-2023-4863-analysis
CVE-2023-4863 libwebp Training and Defense Analysis Project Advisor Information Full Name| GitHub| Email| LinkedIn| Website ---|---|---|---|--- Keyvan Arasteh| Student Information Full Name| Student ID ---|--- Batuhan Seydi Çelik| 25201006 Course Information Course Name| Course Code|...
lab-cve-2023-4863
CVE-2023-4863 — libwebp Exploitation Lab Reproduction of CVE-2023-4863 heap buffer overflow in libwebp in a fully isolated automated Docker environment. Based on the practice from the Ethical Hacking module of CEFIRE. What this lab does Spins up eight containers on a private network:...
CVE-2023-4863
CVE-2023-4863 root@kitploit: checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build...
CVE-2023-4863
level 1: craft.c - bad.webp root@kitploit: exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error:...
NotEnough
Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB Out Of Band write for vulnerable libwebp library i.e. libwebp = 1.3.1. This vulnerability is known as CVE-2023-4863 or CVE-2023-41064. We can overflow the pre-allocated huffman table b...
webp_Android10_r33_CVE-2023-1999
root@kitploit: / \/ / / / \ \ / / \ / \//// / / / \ \ / / / / / / / \ \ / \ /////v1.0.2 Description: WebP codec: library to encode and decode images in WebP format. This package contains the library that can be used in other programs to add WebP support, as well as the command line tools...
vulnerabilidad-LibWebP-CVE-2023-41064
vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código para desencadenar esta vulnerabilidad CVE-2023-41064 Este es un script de Python que crea un archivo WebP un formato de imagen vacío con una estructura de encabezado específica. El propósito de este script es generar un archivo WebP que...
webp-CVE-2023-4863
libwebp CVE-2023-4863 A Vulnerability to Hack The World - CVE-2023-4863 Finding The .webp Vulnerability in 8s Fuzzing with AFL++...
libwebp-checker
中文 | EN 针对CVE-2023-4863漏洞的libwebp检查工具 用于在命令行检测指定目录或当前运行进程中是否存在大于0.5.0版本的libwebp依赖，从而识别可能受到CVE-2023-4863漏洞影响的软件。 由于涉及文件扫描，建议尽量在测试环境中运行，以免影响生产服务。 效果截图 运行结果 目录 1. 工作原理 2. 使用场景 3. 使用步骤 4. 已发现的受影响java组件 5. 交流和问题反馈 6. 开源协议 工作原理 1. CVE-2023-4863漏洞影响libwebp...
CVE-2023-41064
LibWebP vulnerability CVE-2023-41064 Code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP file an image format with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Chromium, and LibWebP
A heap buffer overflow in libwebp in Google Chrome prior to version 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out-of-bounds memory write through a crafted HTML page. Chromium security severity: Critical...
Astra Linux – Vulnerability in libwebp
An use of an uninitialized value was found in libwebp in versions before 1.0.1 in the ReadSymbol function...
Astra Linux – Vulnerability in libwebp
A flaw was discovered in libwebp in versions prior to 1.0.1. A use-after-free vulnerability was identified due to a thread being terminated prematurely. The greatest threat posed by this vulnerability is related to data confidentiality and integrity, as well as system availability...
Astra Linux – Vulnerability in libwebp
A flaw was discovered in libwebp in versions prior to 1.0.1. A heap-based buffer overflow is possible in the function WebPDecodeRGBInto due to an invalid check for buffer size. The greatest threat from this vulnerability is related to data confidentiality and integrity, as well as system...
Astra Linux – Vulnerability in libwebp
A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the GetLE16 function...
Astra Linux – Vulnerability in libwebp
A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1, specifically in the PutLE16 function...
Astra Linux – Vulnerability in libwebp
A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the GetLE24 function...
Astra Linux – Vulnerability in libwebp
A flaw was discovered in libwebp in versions prior to 1.0.1. When reading a file, libwebp allocates an excessive amount of memory. The greatest threat posed by this vulnerability is related to service availability...