Lucene search
+L

75 matches found

Talos
Talos
added 2019/07/29 12:0 a.m.113 views

SDL_image PCX Image Code execution Vulnerability

Summary An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2image 2.0.4. A specially crafted PCX image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Tested...

8.8CVSS8.9AI score0.03616EPSS
Exploits0
Talos
Talos
added 2019/07/29 12:0 a.m.130 views

SDL_image XPM image colorhash parsing Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer. This buffer can then be written out of bounds, resulting in a...

8.8CVSS8.9AI score0.04043EPSS
Exploits1
Talos
Talos
added 2019/07/29 12:0 a.m.120 views

SDL_image XPM image color code code execution vulnerability

Summary An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then be written out of bounds resulting in a heap overflow,...

8.8CVSS8.8AI score0.03616EPSS
Exploits0
FreeBSD
FreeBSD
added 2019/07/02 12:0 a.m.32 views

SDL2_image -- multiple vulnerabilities

SDLimage developers report: Fixed a number of security issues: TALOS-2019-0820 TALOS-2019-0821 TALOS-2019-0841 TALOS-2019-0842 TALOS-2019-0843 TALOS-2019-0844...

8.8CVSS3.3AI score0.04515EPSS
Exploits3References6
OSV
OSV
added 2018/11/22 4:29 p.m.5 views

SUSE-SU-2018:3861-1 Security update for SDL_image

This update for SDLimage fixes the following issues: Security issue fixed: - CVE-2018-3977: Fixed a heap overflow issue bsc1114519...

8.8CVSS8.8AI score0.03479EPSS
Exploits1References3
OSV
OSV
added 2018/06/06 6:15 p.m.9 views

MGASA-2018-0276 Updated SDL_image packages fix security vulnerability

Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 1.2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened CVE-2017-12122, CVE-2017-14440, CVE-2017-14441, CVE-2017-14442, CVE-2017-1444...

8.8CVSS7.8AI score0.02677EPSS
Exploits3References3
Mageia
Mageia
added 2018/06/06 6:15 p.m.49 views

Updated SDL_image packages fix security vulnerability

Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 1.2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened CVE-2017-12122, CVE-2017-14440, CVE-2017-14441, CVE-2017-14442, CVE-2017-1444...

8.8CVSS2.9AI score0.02677EPSS
Exploits3References2
Mageia
Mageia
added 2018/03/19 12:13 p.m.35 views

Updated SDL_image packages fix security vulnerability

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS4.2AI score0.02656EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2018/02/21 12:0 a.m.59 views

openSUSE Security Update : SDL_image / SDL2_image (openSUSE-2018-187)

This update for SDLimage and SDL2image fixes the following security issue : - CVE-2017-2887: A specially crafted file could have been used to cause a stack overflow resulting in potential code execution bsc1062777 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

8.8CVSS8.1AI score0.02656EPSS
Exploits1References2
seebug.org
seebug.org
added 2017/11/06 12:0 a.m.31 views

Simple DirectMedia Layer SDL_image XCF Property Handling Code Execution Vulnerability(CVE-2017-2887)

Summary An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger thi...

6.8CVSS9AI score0.02656EPSS
Exploits1
OSV
OSV
added 2017/11/02 9:47 p.m.6 views

MGASA-2017-0397 Updated sdl2_image & mingw packages fix security vulnerability

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.8AI score0.02656EPSS
Exploits1References3
NVD
NVD
added 2017/10/11 6:29 p.m.11 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.8AI score0.02656EPSS
Exploits1References4
OSV
OSV
added 2017/10/11 6:29 p.m.17 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.9AI score
Exploits0References4
Prion
Prion
added 2017/10/11 6:29 p.m.17 views

Stack overflow

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

6.8CVSS8.8AI score0.02656EPSS
Exploits1References4Affected Software2
UbuntuCve
UbuntuCve
added 2017/10/11 6:29 p.m.22 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS7.5AI score0.02656EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2017/10/11 6:0 p.m.45 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.9AI score0.02656EPSS
Exploits1
CVE
CVE
added 2017/10/11 6:0 p.m.95 views

CVE-2017-2887

CVE-2017-2887 affects SDL_image 2.0.1, with a stack-based buffer overflow in the XCF property handling. A specially crafted XCF file can overflow a stack buffer, potentially enabling code execution. The vulnerability is exploitable via crafted XCF input and does not specify a required user intera...

8.8CVSS8.7AI score0.02656EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2017/10/11 6:0 p.m.28 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.8AI score0.02656EPSS
Exploits1References4
Talos
Talos
added 2017/10/10 12:0 a.m.36 views

Simple DirectMedia Layer SDL_image XCF Property Handling Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger thi...

8.8CVSS8.8AI score0.02656EPSS
Exploits1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.11 views

SDL_image 1.2.6 Invalid GIF File LWZ Minimum Code Size Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occurs when handling malformed GIF images. Attacker...

7.1AI score
Exploits0
Rows per page
Query Builder