Lucene search
+L

545 matches found

seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•42 views

Apple QuickTime PICT PnSize Buffer Overflow

No description provided by source. $Id: applequicktimepnsize.rb 13691 2011-09-03 21:17:58Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

9.3CVSS0.1AI score0.60106EPSS
SaveExploits14
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•19 views

Apple Mac OS X 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22207/info Mac OS X QuickDraw is prone to a remote memory-corruption vulnerability because the software fails to properly handle malformed PICT image files. Successfully exploiting this issue allows remote attackers to...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/01 12:00 a.m.•5 views

CVE-2013-3662: Improper Restriction of Operations within the Bounds of a Memory Buffer

Timbre SketchUp formerly Google SketchUp before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow...

9.3CVSS6.8AI score0.31864EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/07/01 12:00 a.m.•5 views

CVE-2013-3664: Improper Restriction of Operations within the Bounds of a Memory Buffer

Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662...

9.3CVSS6.5AI score0.29778EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2014/07/01 12:00 a.m.•2 views

PT-2014-2696

Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662...

9.3CVSS0.29778EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2014/07/01 12:00 a.m.•2 views

PT-2014-2694

Name of the Vulnerable Software and Affected Versions SketchUp versions prior to 8 Maintenance 2 Description The issue allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture. This is triggered by a stack-based buffer overflow. Recommendations For...

9.3CVSS0.31864EPSS
SaveExploits1References4
Check Point Advisories
Check Point Advisories
•added 2014/04/16 12:00 a.m.•47 views

Microsoft Office PICT Filter Map Structure Memory Corruption - Ver2 (CVE-2008-3021)

A memory corruption vulnerability has been reported in Microsoft Office. The vulnerability is due to a memory corruption error when a malformed PICT file is opened by any of the affected Microsoft Office applications. Successful exploitation of this vulnerability could allow a remote attacker to...

7.2AI score0.35905EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2014/04/16 12:00 a.m.•43 views

Apple QuickDraw PICT Images ARGB Records Handling Memory Corruption - Ver2 (CVE-2007-0462)

A memory corruption vulnerability has been reported in QuickDraw. The vulnerability is due to improper handling of PICT image files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.3AI score0.0665EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2014/01/20 12:00 a.m.•59 views

Apple Mac OS X Multiple Vulnerabilities - 02 (Jan 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.1AI score0.47913EPSS
SaveExploits15References1
Check Point Advisories
Check Point Advisories
•added 2013/07/23 12:00 a.m.•32 views

Trimble Navigation SketchUp PICT File Buffer Overflow - Improved Performance (CVE-2013-3664)

A remote code execution vulnerability has been reported in Trimble SketchUp. The vulnerability is due to a stack buffer overflow while processing PICT files which contain a malicious number of ARGB entries. A remote attacker can exploit this vulnerability by enticing a target user to open a...

9.3CVSS7.5AI score0.29778EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2013/06/19 12:00 a.m.•30 views

Google SketchUp < 8.0.11752 MAC Pict Buffer Overflow

The version of Google SketchUp installed on the remote Windows host is earlier than 8.0.11752. As such, it reportedly is affected by a buffer overflow vulnerability. An error exists related to the handling of embedded MAC Pict textures that allows a stack-based buffer overflow, leading to...

9.3CVSS6.4AI score0.31864EPSS
SaveExploits1References3
Prion
Prion
•added 2013/06/05 2:39 p.m.•26 views

Buffer overflow

Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image...

6.8CVSS8.2AI score0.0278EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2013/06/05 10:00 a.m.•86 views

CVE-2013-0975

Apple Mac OS X QuickDraw Manager is affected by a buffer overflow in handling PICT images, allowing remote code execution or application crash. The vulnerability exists in OS X versions before 10.8.4 and is triggered by a crafted PICT image. Apple addressed this in OS X 10.8.4 and Security Update...

6.8CVSS7.8AI score0.0278EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2013/06/05 10:00 a.m.•53 views

CVE-2013-0975

Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image...

7.7AI score0.0278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/06/05 12:00 a.m.•5 views

PT-2013-2767

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PICT image. This is due to a buffer overflow in the QuickDraw Manager. Recommendations F...

6.8CVSS0.0278EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2013/06/05 12:00 a.m.•45 views

Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)

Binary data 6857.prm...

9.3CVSS6.8AI score0.47913EPSS
SaveExploits15References25
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/06/05 12:00 a.m.•5 views

CVE-2013-0975: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image...

6.8CVSS6.5AI score0.0278EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2013/06/03 12:00 a.m.•78 views

CVE-2013-3662 - Sketchup MAC Pict Material Palette Stack Corruption

If you are still using an old version of SketchUp8M2 you should upgrade it. Title: Sketchup MAC Pict Material Palette Stack Corruption Product: Google SketchUp Advisory ID: BINA-20111201 CVE ID: CVE-2013-3662 Class: Boundary Error Condition Buffer Overflow Vulnerability class: Client side/ file...

9.3CVSS6.7AI score0.31864EPSS
SaveExploits1
securityvulns
securityvulns
•added 2013/06/03 12:00 a.m.•77 views

Sketchup multiple security vulnerabilities

Vulnerabilities on SKP, BMP, PICT parsing...

9.3CVSS3AI score0.31864EPSS
SaveExploits3References3Affected Software1
Binamuse
Binamuse
•added 2013/05/31 2:36 p.m.•718 views

Multiple vulnerabilities on sketchup

SketchUp is a 3D modeling program marketed by Trimble Navigation Limitedpreviously Google and designed for architectural, civil, and mechanical engineers as well as filmmakers, game developers, and related professions. SketchUp fails to validate the input when parsing different types of embedded...

9.3CVSS7.9AI score0.31864EPSS
SaveExploits3
Rows per page
Query Builder