Lucene search
+L

442 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:00 a.m.24 views

Autodesk AutoCAD PICT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

7.8CVSS5.1AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/03/07 12:00 a.m.28 views

Autodesk AutoCAD PICT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

7.8CVSS5.1AI score0.01708EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/02/22 12:00 a.m.14 views

The vulnerability of Adobe Illustrator, a graphic editor, arises from copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor lies in the copying of buffers without checking the size of the input data when processing PICT graphic files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.04443EPSS
SaveExploits0References6Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2022/02/16 12:00 a.m.34 views

Apple macOS ImageIO PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS8.6AI score0.01844EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/27 12:00 a.m.72 views

libsixel Denial of Service Vulnerability

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel has a denial of service vulnerability in v1.10.3 and earlier, which stems from a NULL pointer dereference in libsixel's stbimage.h component, and can be exploited ...

6.5CVSS4AI score0.00922EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/25 12:15 p.m.3 views

DEBIAN-CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

6.5CVSS6.6AI score0.00922EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/25 12:15 p.m.18 views

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

6.5CVSS6.8AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/25 12:15 p.m.15 views

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

6.5CVSS5.8AI score0.00922EPSS
SaveExploits1References2
NVD
NVD
added 2022/01/25 12:15 p.m.21 views

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

6.5CVSS0.00922EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/25 12:15 p.m.20 views

UBUNTU-CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

6.5CVSS5.8AI score0.00922EPSS
SaveExploits1References3
Prion
Prion
added 2022/01/25 12:15 p.m.22 views

Null pointer dereference

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

4.3CVSS6.2AI score0.00922EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/01/25 12:15 p.m.18 views

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

6.5CVSS6.6AI score0.00922EPSS
SaveExploits1References2
CVE
CVE
added 2022/01/25 11:36 a.m.63 views

CVE-2021-45340

CVE-2021-45340 affects Libsixel up to and including v1.10.3, due to a NULL pointer dereference in libsixel’s stb_image.h, enabling a denial of service via a crafted PICT file. Connected sources confirm the vulnerable range and the root cause (NULL pointer dereference) with impact described as DOS...

6.5CVSS6.1AI score0.00922EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/01/25 11:36 a.m.37 views

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

6.4AI score0.00922EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/01/25 12:00 a.m.10 views

libsixel 代码问题漏洞

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel has a denial of service vulnerability in v1.10.3 and earlier, which stems from a NULL pointer dereference in libsixel's stbimage.h component, and can be exploited ...

6.5CVSS5.6AI score0.00922EPSS
SaveExploits1References3
Snyk
Snyk
added 2021/12/19 11:00 p.m.2 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the stbiconvertformat function via the stbimage.h component. An attacker can cause a crash and denial of service by loading a specially crafted invalid PICT file. Remediation A fix was pushed into the master...

8.7CVSS6.6AI score0.00922EPSS
SaveExploits1References2
OSV
OSV
added 2021/11/10 10:15 p.m.5 views

CVE-2020-23886

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree...

5.5CVSS5.8AI score0.00947EPSS
SaveExploits1References3
Prion
Prion
added 2021/11/10 10:15 p.m.27 views

Design/Logic Flaw

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree...

4.3CVSS5.6AI score0.00947EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/10 12:00 a.m.11 views

PT-2021-10962 · Xnview Mp · Xnview Mp

Name of the Vulnerable Software and Affected Versions: XnView MP version 0.96.4 Description: A heap overflow issue allows attackers to cause a denial of service DoS via a crafted pict file, related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree. Recommendations: For XnView MP versi...

5.5CVSS5.5AI score0.00947EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.10 views

XnView 缓冲区错误漏洞

XnView MP is a set of image viewing software that is an enhanced version of XnView Classic. The software can be used to view, convert, organize and edit graphics and video files.XnView MP suffers from a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of servic...

5.5CVSS6AI score0.00947EPSS
SaveExploits1References4
Rows per page
Query Builder