Lucene search
+L

398 matches found

RedhatCVE
RedhatCVE
•added 2018/10/08 9:19 p.m.•28 views

CVE-2018-18023

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS4.7AI score0.01477EPSS
SaveExploits1References2
Prion
Prion
•added 2018/10/07 6:29 p.m.•29 views

Heap overflow

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file...

4.3CVSS6.2AI score0.01477EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2018/10/07 6:29 p.m.•34 views

CVE-2018-18023

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS6.2AI score0.01477EPSS
SaveExploits1References2
NVD
NVD
•added 2018/10/07 6:29 p.m.•28 views

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS6.4AI score0.02541EPSS
SaveExploits1References4
OSV
OSV
•added 2018/10/07 6:29 p.m.•13 views

CVE-2018-18023

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS6.5AI score
SaveExploits0References2
OSV
OSV
•added 2018/10/07 6:29 p.m.•8 views

DEBIAN-CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS6.7AI score0.02541EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/10/07 6:00 p.m.•63 views

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.2AI score0.02541EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2018/10/07 6:00 p.m.•86 views

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS6.3AI score0.02541EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2018/10/07 6:00 p.m.•83 views

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS7.1AI score0.02541EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2018/10/07 12:00 a.m.•45 views

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS7AI score0.02541EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/07 12:00 a.m.•3 views

CVE-2018-18023: Out-of-bounds Read

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS6.8AI score0.01477EPSS
SaveExploits1References2
OSV
OSV
•added 2018/10/07 12:00 a.m.•14 views

UBUNTU-CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

6.5CVSS7.1AI score0.02541EPSS
SaveExploits1References4
exploitpack
exploitpack
•added 2018/07/27 12:00 a.m.•60 views

Skia - Heap Overflow in SkScan::FillPath due to Precision Error

Skia - Heap Overflow in SkScan::FillPath due to Precision Error There is a heap overflow in Skia when drawing paths with antialiasing turned off. This issue can be triggered in both Google Chrom and Mozilla Firefox by rendering a specially crafted SVG image. PoCs for both browsers are attached...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/07/27 12:00 a.m.•91 views

Skia - Heap Overflow in SkScan::FillPath due to Precision Error

There is a heap overflow in Skia when drawing paths with antialiasing turned off. This issue can be triggered in both Google Chrom and Mozilla Firefox by rendering a specially crafted SVG image. PoCs for both browsers are attached. Details: When Skia fills a path with antialiasing turned off,...

8.8CVSS8.1AI score0.07666EPSS
SaveExploits2
Prion
Prion
•added 2018/06/11 9:29 p.m.•28 views

Design/Logic Flaw

A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier...

4.3CVSS6.1AI score0.01755EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2018/06/11 9:29 p.m.•27 views

CVE-2017-7844

A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier...

6.5CVSS6.7AI score0.01755EPSS
SaveExploits0References1
Mend
Mend
•added 2018/06/11 9:00 p.m.•1 views

CVE-2017-7844

A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier...

7.1CVSS0.01755EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2018/06/11 9:00 p.m.•30 views

CVE-2017-7844

A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier...

6.5CVSS8.1AI score0.01755EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/11 12:00 a.m.•8 views

CVE-2017-7844: Exposure of Sensitive Information to an Unauthorized Actor

A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier...

6.5CVSS6.2AI score0.01755EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/05/27 12:00 a.m.•46 views

Debian: Security Advisory (DLA-1385-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.18925EPSS
SaveExploits0References3
Rows per page
Query Builder