Lucene search
K

1417 matches found

NVD
NVD
added 2016/04/13 4:59 p.m.28 views

CVE-2016-0740

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5CVSS6AI score0.0236EPSS
Exploits0References4
Prion
Prion
added 2016/04/13 4:59 p.m.27 views

Buffer overflow

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

4.3CVSS7.1AI score0.0236EPSS
Exploits0References4Affected Software2
PyPA
PyPA
added 2016/04/13 4:59 p.m.3 views

PYSEC-2016-5

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5CVSS7.2AI score0.0236EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2016/04/13 4:0 p.m.130 views

CVE-2016-0740

Pillow vulnerability CVE-2016-0740: Buffer overflow in ImagingLibTiffDecode (libImaging/TiffDecode.c) allows remote attackers to overwrite memory via a crafted TIFF file. Affected software: Pillow prior to 3.1.1. Impact is memory corruption; exploitation requires processing a malformed TIFF. Reme...

6.5CVSS6.4AI score0.0236EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2016/04/13 4:0 p.m.31 views

CVE-2016-0740

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5AI score0.0236EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2016/04/13 4:0 p.m.33 views

CVE-2016-0740

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5CVSS6.4AI score0.0236EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/04/01 12:0 a.m.21 views

FreeBSD : Multiple vulnerabilities in Botan (4cd9b19f-f66d-11e5-b94c-001999f8d30b)

The botan developers reports : Infinite loop in modular square root algorithm - The ressol function implements the Tonelli-Shanks algorithm for finding square roots could be sent into a nearly infinite loop due to a misplaced conditional check. This could occur if a composite modulus is provided,...

10CVSS8.6AI score0.06677EPSS
Exploits0References4
Mageia
Mageia
added 2016/03/07 9:51 p.m.34 views

Updated botan packages fix security vulnerability

The BER decoder would crash due to reading from offset 0 of an empty vector if it encountered a BIT STRING which did not contain any data at all. This can be used to easily crash applicatons reading untrusted ASN.1 data, but does not seem exploitable for code execution CVE-2015-5726. The BER...

10CVSS9.6AI score0.06677EPSS
Exploits0References2
OSV
OSV
added 2016/02/17 7:6 p.m.9 views

MGASA-2016-0066 Updated python-pillow packages fix security vulnerability

A buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening a specially crafted invalid TIFF file CVE-2016-0740. A buffer overflow in FliDecode.c causing a segfault when opening FLI files CVE-2016-0775. A buffer overflow in PcdDecode.c causing a segfault...

6.5CVSS6.8AI score0.02689EPSS
Exploits0References5
Mageia
Mageia
added 2016/02/17 7:6 p.m.39 views

Updated python-pillow packages fix security vulnerability

A buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening a specially crafted invalid TIFF file CVE-2016-0740. A buffer overflow in FliDecode.c causing a segfault when opening FLI files CVE-2016-0775. A buffer overflow in PcdDecode.c causing a segfault...

6.5CVSS4.2AI score0.02689EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2016/02/04 12:0 a.m.31 views

CVE-2016-0740

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

6.5CVSS6.8AI score0.0236EPSS
Exploits0References2
FreeBSD Advisory
FreeBSD Advisory
added 2016/01/14 12:0 a.m.15 views

FreeBSD-SA-16:04.linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:04.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer setgroups2 system call vulnerability Category: core Module: kernel Announced:...

7.8CVSS7.1AI score0.00392EPSS
Exploits0
OSV
OSV
added 2015/11/26 8:47 p.m.8 views

MGASA-2015-0455 Updated libsndfile packages fix security vulnerability

Due to a heap overflow in libsndfile, a specially crafted AIFF header can manage index values in order to use memcpy to overwrite memory the heap CVE-2015-7805...

9.3CVSS5.5AI score0.134EPSS
Exploits1References5
0day.today
0day.today
added 2015/11/20 12:0 a.m.15 views

Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link :...

7AI score
Exploits0
exploitpack
exploitpack
added 2015/11/19 12:0 a.m.14 views

Sam Spade 1.14 - Decode URL Buffer Overflow Crash (PoC)

Sam Spade 1.14 - Decode URL Buffer Overflow Crash PoC !/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link :...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2015/11/19 12:0 a.m.34 views

Sam Spade 1.14 - Decode URL Buffer Overflow Crash (PoC)

!/usr/bin/env python Exploit Title : Sam Spade 1.14 Decode URL Buffer Overflow Crash PoC Discovery by : Vivek Mahajan - c3p70r Discovery Date : 19/11/2015 Vendor Homepage : http://samspade.org Software Link : http://www.majorgeeks.com/files/details/samspade.html Tested Version : 1.14 Vulnerabilit...

7.4AI score
Exploits0
RedhatCVE
RedhatCVE
added 2015/10/30 9:26 a.m.26 views

CVE-2007-2844

PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system access...

9.3CVSS7.5AI score0.02863EPSS
Exploits0References3
NVD
NVD
added 2015/09/14 1:59 a.m.18 views

CVE-2015-6285

Format string vulnerability in Cisco Email Security Appliance ESA 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service memory overwrite or service outage via format string specifiers in an HTTP request, aka Bug ID CSCug21497...

6.4CVSS6.7AI score0.01417EPSS
Exploits0References2
CVE
CVE
added 2015/09/14 1:0 a.m.47 views

CVE-2015-6285

CVE-2015-6285 describes a format-string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 that can be exploited remotely by sending crafted HTTP requests to trigger a DoS (memory overwrite or service outage). The issue stems from improper handling/validation of format specifie...

6.4CVSS6.9AI score0.01417EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.20 views

Amazon Linux: Security Advisory (ALAS-2012-74)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.5AI score0.09629EPSS
Exploits1References2
Rows per page
Query Builder