Lucene search
+L

6825 matches found

NVD
NVD
added 2020/04/22 2:15 p.m.27 views

CVE-2020-11693

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...

7.5CVSS8AI score0.0178EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/22 2:15 p.m.25 views

Design/Logic Flaw

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...

5CVSS7.4AI score0.0178EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/22 1:52 p.m.34 views

CVE-2020-11693

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...

8AI score0.0178EPSS
SaveExploits0References1
CVE
CVE
added 2020/04/22 1:52 p.m.56 views

CVE-2020-11693

CVE-2020-11693 affects JetBrains YouTrack prior to 2020.1.659. The vulnerability allows denial of service when a malformed TIFF file is attached to an issue. The issue is documented in NVD/NVD-style records and JetBrains’ Security Bulletin Q1 2020; remediation is to upgrade YouTrack to version 20...

7.5CVSS7.4AI score0.0178EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/04/16 12:00 a.m.51 views

EulerOS Virtualization 3.0.2.2 : libtiff (EulerOS-SA-2020-1447)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service TIFFSetupStrips heap-based buffe...

9.8CVSS6.9AI score0.1496EPSS
SaveExploits30References49
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.17 views

The vulnerability in the backend/tiff/tiff-document.c component of the Evince document viewing software allows a hacker to execute arbitrary code.

The vulnerability in the backend/tiff/tiff-document.c component of the Evince document viewing software arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

9.3CVSS7.6AI score0.02092EPSS
SaveExploits1References10Affected Software9
Tenable Nessus
Tenable Nessus
added 2020/04/16 12:00 a.m.41 views

EulerOS Virtualization 3.0.2.2 : gd (EulerOS-SA-2020-1464)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via...

7.8CVSS7.3AI score0.03736EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2020/04/16 12:00 a.m.41 views

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2020-1447)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.1496EPSS
SaveExploits30References2
Veracode
Veracode
added 2020/04/10 12:55 a.m.37 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF Internet Fax image files, compressed with the CCITT Group 4 compression algorithm. An attacker could use this flaw to create a specially-crafted TIFF file that,...

9.3CVSS3.5AI score0.07474EPSS
SaveExploits0References45Affected Software1
Veracode
Veracode
added 2020/04/10 12:54 a.m.38 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF files encoded with a 4-bit run-length encoding scheme from ThunderScan. An attacker could use this flaw to create a specially-crafte...

6.8CVSS4AI score0.06233EPSS
SaveExploits0References41Affected Software1
Veracode
Veracode
added 2020/04/10 12:49 a.m.31 views

Denial Of Service (DoS)

The libtiff packages is vulnerable to Denial Of Service DoS. An input validation flaw was discovered in libtiff. An attacker could use this flaw to create a specially-crafted TIFF file that, when opened, would cause an application linked against libtiff to crash...

4.3CVSS3AI score0.01986EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
added 2020/04/10 12:49 a.m.38 views

Denial Of Service (DoS)

The libtiff package is vulnerable to Denial Of Service DoS.Due to integer overflow flaws discovered in libtiff, an attacker can create a specially-crafted TIFF file that, when opened, would cause an application linked against libtiff to crash or, possibly, execute arbitrary code...

6.8CVSS5.1AI score0.12854EPSS
SaveExploits0References34Affected Software1
Veracode
Veracode
added 2020/04/10 12:37 a.m.51 views

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the Tagged Image File Format TIFF decoding routines used by the CUPS image-converting filters, "imagetops" and "imagetoraster". An attacker could create a malicious...

6.8CVSS4.7AI score0.04246EPSS
SaveExploits2References21Affected Software1
Veracode
Veracode
added 2020/04/10 12:36 a.m.27 views

Denial Of Service (DoS)

libtiff is vulnerable to denial of service DoS. The vulnerability exists as a buffer underwrite flaw was found in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a specially-crafted LZW-encoded TIFF file, which once opened by an unsuspecting user, would caus...

4.3CVSS3.1AI score0.0895EPSS
SaveExploits3References43Affected Software1
Veracode
Veracode
added 2020/04/10 12:36 a.m.34 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as several integer overflow flaws, leading to heap-based buffer overflows, were found in various libtiff color space conversion tools. An attacker could create a specially-crafted TIFF file, which once opened by an...

9.3CVSS6.3AI score0.04152EPSS
SaveExploits1References31Affected Software1
Veracode
Veracode
added 2020/04/10 12:34 a.m.35 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as multiple uses of uninitialized values were discovered in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a carefully crafted LZW-encoded TIFF file that would cause an application...

6.8CVSS4.2AI score0.0413EPSS
SaveExploits1References49Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.30 views

Denial Of Service (DoS)

The libtiff is vulnerable denial of service DoS. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.8CVSS4.7AI score0.02781EPSS
SaveExploits1References43Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.32 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.1AI score0.05316EPSS
SaveExploits1References51Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.32 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.2AI score0.05316EPSS
SaveExploits1References49Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.28 views

Heap-based Buffer Overflow

The libtiff is vulnerable to Heap-based buffer overflow. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.7AI score0.0442EPSS
SaveExploits1References45Affected Software1
Rows per page
Query Builder