Lucene search
+L

336 matches found

OSV
OSV
•added 2017/12/20 12:00 a.m.•14 views

UBUNTU-CVE-2017-17786

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c related to bgr2rgb.part.1 via an unexpected bits-per-pixel value for an RGBA image...

7.8CVSS6.9AI score0.01337EPSS
SaveExploits0References9
CNVD
CNVD
•added 2017/11/09 12:00 a.m.•18 views

sam2p integer overflow vulnerability (CNVD-2017-36354)

sam2p is a command-line utility that can convert many raster bitmap image formats such as GIF, JPG/JPEG and PNG to PostScript or PDF files. An integer overflow vulnerability exists in input-bmp.ci in the ReadImage function in sam2p version 0.49.4, for which there is currently no detailed...

5.5CVSS7.2AI score0.00854EPSS
SaveExploits0References1
Prion
Prion
•added 2017/11/08 6:29 a.m.•20 views

Integer overflow

In sam2p 0.49.4, there are integer overflows with resultant heap-based buffer overflows in input-bmp.ci in the function ReadImage, because "width height" multiplications occur unsafely...

4.3CVSS5.8AI score0.00854EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2017/11/08 6:29 a.m.•11 views

CVE-2017-16663

In sam2p 0.49.4, there are integer overflows with resultant heap-based buffer overflows in input-bmp.ci in the function ReadImage, because "width height" multiplications occur unsafely...

5.5CVSS5.7AI score0.00854EPSS
SaveExploits0References3
OSV
OSV
•added 2017/11/08 6:29 a.m.•10 views

UBUNTU-CVE-2017-16663

In sam2p 0.49.4, there are integer overflows with resultant heap-based buffer overflows in input-bmp.ci in the function ReadImage, because "width height" multiplications occur unsafely...

5.5CVSS7.5AI score0.00854EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/11/08 6:00 a.m.•44 views

CVE-2017-16663

In sam2p 0.49.4, there are integer overflows with resultant heap-based buffer overflows in input-bmp.ci in the function ReadImage, because "width height" multiplications occur unsafely...

5.9AI score0.00854EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/08 12:00 a.m.•1 views

CVE-2017-16663: Integer Overflow or Wraparound

In sam2p 0.49.4, there are integer overflows with resultant heap-based buffer overflows in input-bmp.ci in the function ReadImage, because "width height" multiplications occur unsafely...

5.5CVSS6.6AI score0.00854EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/08/08 12:00 a.m.•18 views

ImageMagick Denial of Service Vulnerability (CNVD-2017-20999)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadImage' function of the MagickCore/constitute.c file in ImageMagic...

6.5CVSS6.7AI score0.00895EPSS
SaveExploits0References1
OSV
OSV
•added 2017/08/07 9:29 p.m.•6 views

DEBIAN-CVE-2017-12675

In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service...

6.5CVSS6.5AI score0.00895EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/08/07 9:29 p.m.•37 views

CVE-2017-12675

In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service...

6.5CVSS6.7AI score0.00895EPSS
SaveExploits0References1
OSV
OSV
•added 2017/08/07 9:29 p.m.•20 views

UBUNTU-CVE-2017-12675

In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service...

6.5CVSS6.2AI score0.00895EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/07 12:00 a.m.•2 views

CVE-2017-12675: Missing Release of Resource after Effective Lifetime

In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service...

6.5CVSS6.3AI score0.00895EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/08/03 12:00 a.m.•15 views

OpenExif 'ExifImageFile::readImage' Function Denial of Service Vulnerability

OpenExif is an object-oriented library for accessing image files in Exif format. A security vulnerability exists in the 'ExifImageFile::readImage' function of the ExifImageFileRead.cpp file in OpenExif version 2.1.4. A remote attacker can exploit this vulnerability to cause a denial of service...

7.1CVSS6.8AI score0.00933EPSS
SaveExploits0References1
CVE
CVE
•added 2017/07/31 1:00 p.m.•62 views

CVE-2017-11118

The CVE-2017-11118 entry concerns OpenExif 2.1.4. The vulnerability exists in ExifImageFileRead.cpp within the function ExifImageFile::readImage, where processing a specially crafted JPEG can be exploited by remote attackers to trigger a denial of service via an infinite loop and high CPU usage. ...

7.1CVSS5.4AI score0.00933EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/31 12:00 a.m.•4 views

CVE-2017-11118: Loop with Unreachable Exit Condition

The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted jpg file...

7.1CVSS5.8AI score0.00933EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/06/06 12:00 a.m.•12 views

AutoTrace heap buffer overflow vulnerability (CNVD-2017-08538)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap buffer overflow vulnerability exists in the 'ReadImage' function of input-tga.c:528:7 in the libautotrace.a file in AutoTrace version 0.31.1. An attacker could exploit this vulnerability to execute...

9.8CVSS8AI score0.01822EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/05/25 12:00 a.m.•12 views

AutoTrace heap buffer overflow vulnerability (CNVD-2017-08472)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap buffer overflow vulnerability exists in the 'ReadImage' function of input-bmp.c:355:25 in the libautotrace.a file in AutoTrace version 0.31.1. An attacker could exploit this vulnerability to execute...

9.8CVSS8AI score0.01878EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/05/25 12:00 a.m.•16 views

AutoTrace heap buffer overflow vulnerability (CNVD-2017-08505)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap buffer overflow vulnerability exists in the 'ReadImage' function in input-tga.c:559:29 of the libautotrace.a file in AutoTrace version 0.31.1. An attacker can exploit this vulnerability to cause a hea...

9.8CVSS7.3AI score0.01928EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/05/25 12:00 a.m.•13 views

AutoTrace heap buffer overflow vulnerability (CNVD-2017-08493)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap buffer overflow vulnerability exists in the 'ReadImage' function of input-bmp.c:492:24 in the libautotrace.a file in AutoTrace version 0.31.1. An attacker can exploit this vulnerability to cause a hea...

9.8CVSS7.3AI score0.02173EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/05/25 12:00 a.m.•13 views

AutoTrace heap buffer overflow vulnerability (CNVD-2017-08477)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A heap-based buffer overflow vulnerability exists in the 'ReadImage' function of input-tga.c:528:7 in the libautotrace.a file in AutoTrace version 0.31.1. An attacker could exploit this vulnerability to...

9.8CVSS8AI score0.01775EPSS
SaveExploits0References1
Rows per page
Query Builder