Lucene search
+L

95 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/01 12:00 a.m.•3 views

CVE-2021-36073: Heap-based Buffer Overflow

Adobe Bridge version 11.1 and earlier is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim...

9.3CVSS6.4AI score0.0755EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/01 12:00 a.m.•2 views

CVE-2021-36079: Out-of-bounds Read

Adobe Bridge version 11.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted .SGI file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

9.3CVSS6.1AI score0.04277EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/08/20 6:09 p.m.•191 views

CVE-2021-28624 Adobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Bridge version 11.0.2 and earlier are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

7.8CVSS8AI score0.07228EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•60 views

Siemens JT2Go SGI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SGI...

7.8CVSS4.6AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•56 views

Siemens JT2Go SGI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SGI...

7.8CVSS4.3AI score0.0166EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/19 12:00 a.m.•68 views

Siemens JT2Go SGI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SGI...

7.8CVSS4.3AI score0.0166EPSS
SaveExploits0References2
Talos
Talos
•added 2021/03/30 12:00 a.m.•40 views

Accusoft ImageGear SGI Format Buffer Size Processing out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Accusoft...

9.8CVSS9AI score0.01325EPSS
SaveExploits1
Prion
Prion
•added 2021/01/12 3:15 p.m.•25 views

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

6.8CVSS8.6AI score0.01199EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/01/12 2:38 p.m.•41 views

CVE-2021-21451

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS8.8AI score0.01199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/12 12:00 a.m.•4 views

CVE-2020-26995: Out-of-bounds Write

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of SGI and RGB files. This could result in an out of bounds write past the end of an allocated structur...

8.8CVSS5.9AI score0.03492EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/12 12:00 a.m.•3 views

CVE-2021-21451: Improper Restriction of Operations within the Bounds of a Memory Buffer

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

8.8CVSS8.2AI score0.01199EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2021/01/12 12:00 a.m.•36 views

SAP 3D Visual Enterprise Viewer SGI File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5AI score0.01199EPSS
SaveExploits0
OSV
OSV
•added 2019/12/24 1:15 a.m.•9 views

UBUNTU-CVE-2019-19948

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c...

9.8CVSS7.5AI score0.03678EPSS
SaveExploits0References6
Veracode
Veracode
•added 2017/10/11 2:47 a.m.•22 views

Memory Leak

ImageMagick is vulnerable to denial of service attacks DoS through memory leaks. A memory leak is caused when a malicious user passes an SGI file to the ReadSGIImage function in coders/sgi.c...

6.5CVSS7.2AI score0.02039EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2017/02/20 8:59 a.m.•30 views

Out-of-bounds

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted SGI file...

6.8CVSS8AI score0.01395EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2017/02/20 8:59 a.m.•12 views

CVE-2016-4683

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted SGI file...

7.8CVSS6.1AI score0.01395EPSS
SaveExploits0References2
NVD
NVD
•added 2017/02/20 8:59 a.m.•28 views

CVE-2016-4682

An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a...

7.1CVSS6.2AI score0.01272EPSS
SaveExploits0References4
NVD
NVD
•added 2017/02/20 8:59 a.m.•41 views

CVE-2016-4683

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted SGI file...

7.8CVSS7.5AI score0.01395EPSS
SaveExploits0References2
CVE
CVE
•added 2017/02/20 8:35 a.m.•74 views

CVE-2016-4683

CVE-2016-4683 affects macOS prior to 10.12.1 and targets the ImageIO SGI image parsing code. A crafted SGI file could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service via out-of-bounds memory access, potentially crashing the application. Public refe...

7.8CVSS7.7AI score0.01395EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/02/20 8:35 a.m.•34 views

CVE-2016-4682

An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a...

6.3AI score0.01272EPSS
SaveExploits0References4
Rows per page
Query Builder