Lucene search
+L

741 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/01/14 12:0 a.m.33 views

Siemens JT2Go TGA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of TG...

7.8CVSS5.7AI score0.04297EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/12 9:15 p.m.6 views

CVE-2020-26987

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could lead to a heap-based buffer overflow. An attacker could leverage this...

8.8CVSS7.7AI score0.04297EPSS
SaveExploits0References3
NVD
NVD
added 2021/01/12 9:15 p.m.30 views

CVE-2020-26987

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could lead to a heap-based buffer overflow. An attacker could leverage this...

8.8CVSS8.7AI score0.04297EPSS
SaveExploits0References3
Prion
Prion
added 2021/01/12 9:15 p.m.26 views

Heap overflow

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could lead to a heap-based buffer overflow. An attacker could leverage this...

6.8CVSS8.7AI score0.04297EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2021/01/12 8:18 p.m.36 views

CVE-2020-26987

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could lead to a heap-based buffer overflow. An attacker could leverage this...

8.7AI score0.04297EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.32 views

SAP 3D Visual Enterprise Viewer TGA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS5.7AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.32 views

SAP 3D Visual Enterprise Viewer TGA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.6AI score0.01623EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/09 1:15 p.m.30 views

CVE-2020-6355

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS0.01623EPSS
SaveExploits0References3
OSV
OSV
added 2020/09/09 1:15 p.m.3 views

CVE-2020-6355

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS5.8AI score0.01623EPSS
SaveExploits0References3
NVD
NVD
added 2020/09/09 1:15 p.m.30 views

CVE-2020-6345

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS0.01623EPSS
SaveExploits0References3
Prion
Prion
added 2020/09/09 1:15 p.m.21 views

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.5AI score0.01623EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/09/09 12:55 p.m.35 views

CVE-2020-6355

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.6AI score0.01623EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/09/09 12:51 p.m.25 views

CVE-2020-6345

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.6AI score0.01623EPSS
SaveExploits0References3
CVE
CVE
added 2020/09/09 12:51 p.m.53 views

CVE-2020-6345

CVE-2020-6345 affects SAP 3D Visual Enterprise Viewer (version 9). The issue lies in the parsing of TGA files, due to improper input validation, leading to an out-of-bounds read. This can allow a remote attacker to run code or crash the target when a user opens a crafted TGA file or visits a mali...

4.3CVSS4.5AI score0.01623EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2020/05/10 11:27 p.m.32 views

Denial Of Service (DoS)

gd is vulnerable to denial of serviceDoS. The readimagetga function in gdtga.c in the GD Graphics Library aka libgd allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...

5.5CVSS5.4AI score0.01977EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
added 2020/05/10 11:20 p.m.30 views

Denial Of Service (DoS)

gd is vulnerable to denial of service DoS. The vulnerability exists as gdtga.c in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

6.5CVSS5.2AI score0.03201EPSS
SaveExploits0References9Affected Software1
CNVD
CNVD
added 2020/03/13 12:0 a.m.5 views

Code execution vulnerability in FreeImage TGA file parsing

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A code execution vulnerability exists in the FreeImage image parsing library when loading TGA files. An attack...

8.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/03/09 12:0 a.m.25 views

SUSE SLED12 Security Update : gimp (SUSE-SU-2020:0601-1)

This update for gimp fixes the following issues : Fix for crashing due to segmentation fault caused by importing ghostscript files. bsc1161998 Security issues fixed: CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625 CVE-2017-17786: Fixed an out-of-bounds read in TGA...

7.8CVSS6.1AI score0.01337EPSS
SaveExploits0References11
CNVD
CNVD
added 2020/02/13 12:0 a.m.1 views

Heap Overflow Vulnerability in FreeImage TGA File Parsing

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . The FreeImage image parsing library suffers from a heap overflow vulnerability when parsing TGA files. An...

7.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2020/02/12 12:0 a.m.35 views

Adobe FrameMaker TGA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS5.8AI score0.04528EPSS
SaveExploits0References1
Rows per page
Query Builder