Lucene search
+L

491 matches found

Positive Technologies
Positive Technologies
•added 2021/09/14 12:00 a.m.•1 views

PT-2021-4182

Name of the Vulnerable Software and Affected Versions Adobe Premiere Elements versions 2021.2235820 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code execution in the context ...

9.3CVSS0.017EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/14 12:00 a.m.•5 views

CVE-2020-21049: Out-of-bounds Read

An invalid read in the stbimage.h component of libsixel prior to v1.8.5 allows attackers to cause a denial of service DOS via a crafted PSD file...

6.5CVSS7.2AI score0.01376EPSS
SaveExploits1References2
NVD
NVD
•added 2021/08/20 7:15 p.m.•29 views

CVE-2021-36005

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

9.3CVSS0.06811EPSS
SaveExploits0References1
Prion
Prion
•added 2021/08/20 7:15 p.m.•24 views

Stack overflow

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

9.3CVSS7.8AI score0.06811EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/08/20 6:10 p.m.•13 views

CVE-2021-36005 Adobe Photoshop PSD File Parsing Stack Overflow Vulnerability

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

7.8CVSS8AI score0.06811EPSS
SaveExploits0References1
CVE
CVE
•added 2021/08/20 6:10 p.m.•104 views

CVE-2021-36005

Summary of CVE-2021-36005 : Adobe Photoshop versions 21.2.9 and earlier, and 22.4.2 and earlier, are affected by a stack overflow caused by insecure handling of a crafted PSD file. The issue could lead to arbitrary code execution in the context of the current user. Exploitation requires user inte...

9.3CVSS7.8AI score0.06811EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/08/20 6:10 p.m.•32 views

CVE-2021-36005 Adobe Photoshop PSD File Parsing Stack Overflow Vulnerability

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

7.8CVSS8AI score0.06811EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/20 12:00 a.m.•8 views

CVE-2021-36005: Stack-based Buffer Overflow

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

9.3CVSS6.4AI score0.06811EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/07/02 12:00 a.m.•15 views

The vulnerability of the ReadPSDLayersInternal function in the coders/psd.c component of the console image editing tool ImageMagick, related to a lack of input data validation mechanism, allows attackers to trigger a service failure.

The vulnerability of the ReadPSDLayersInternal function in the ImageMagick console graphics editor’s coders/psd.c file is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially crafted file...

6.5CVSS6.7AI score0.01524EPSS
SaveExploits0References12Affected Software3
OSV
OSV
•added 2021/06/09 2:15 p.m.•18 views

CVE-2021-27640

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

5.5CVSS5.8AI score0.00561EPSS
SaveExploits0References2
NVD
NVD
•added 2021/06/09 2:15 p.m.•36 views

CVE-2021-27640

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

5.5CVSS0.00561EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/09 1:31 p.m.•39 views

CVE-2021-27640

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS5.7AI score0.00561EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/09 12:00 a.m.•2 views

PT-2021-17574

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue is caused by improper input validation, allowing a user to open a manipulated PSD file from untrusted sources. This results in the application crashing and becoming temporarily...

5.5CVSS0.00561EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/09 12:00 a.m.•11 views

CVE-2021-27640: Improper Input Validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

5.5CVSS5.8AI score0.00561EPSS
SaveExploits0References2
OSV
OSV
•added 2021/05/07 3:54 p.m.•38 views

GHSA-3264-3FM9-FG44 Infinite Loop in Apache Tika

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS5.5AI score0.02892EPSS
SaveExploits0References7
OSV
OSV
•added 2021/05/07 3:53 p.m.•31 views

GHSA-3H29-52VH-PQGR Uncontrolled Resource Consumption in Apache Tika

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23...

5.5CVSS5.5AI score0.02986EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2021/03/21 12:00 a.m.•10 views

The vulnerability of the Exiv2::PsdImage::readMetadata function in the psdimage.cpp file of the Exiv2 metadata management library is related to infinite loop execution, allowing attackers to cause service interruptions.

The vulnerability of the Exiv2::PsdImage::readMetadata function in the psdimage.cpp file of the Exiv2 metadata management library is related to improper processing of PSD files. Exploiting this vulnerability could allow an attacker to cause service failures...

6.5CVSS6.6AI score0.01936EPSS
SaveExploits0References11Affected Software5
Cvelist
Cvelist
•added 2021/01/12 2:39 p.m.•38 views

CVE-2021-21450

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS8.8AI score0.01214EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•46 views

SAP 3D Visual Enterprise Viewer PSD File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.9AI score0.01214EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/01/12 12:00 a.m.•0 views

PT-2021-14518

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue is caused by improper input validation, allowing a user to open a manipulated PSD file from untrusted sources. This results in the application crashing and becoming temporarily...

8.8CVSS5.8AI score0.01214EPSS
SaveExploits0References6
Rows per page
Query Builder