Lucene search
K

18 matches found

OSV
OSV
added 2026/03/31 10:6 p.m.2 views

CVE-2026-34546 iccDEV: UB at TiffImg.h

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior UB due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6...

6.2CVSS5.8AI score0.00156EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/03/31 12:0 a.m.2 views

PT-2026-29391

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior UB due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6...

6.2CVSS5.8AI score0.00156EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-16701

Malware in sbrugna...

8.8CVSS8.9AI score0.15627EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2016-8707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an ou...

7.8CVSS8.2AI score0.03653EPSS
Exploits2References2
OSV
OSV
added 2022/03/07 11:29 a.m.2 views

USN-5313-1 openjdk-lts, openjdk-17 vulnerabilities

It was discovered that OpenJDK incorrectly handled deserialization filters. An attacker could possibly use this issue to insert, delete or obtain sensitive information. CVE-2022-21248 It was discovered that OpenJDK incorrectly read uncompressed TIFF files. An attacker could possibly use this issu...

5.3CVSS6.4AI score0.08346EPSS
Exploits0References16
OSV
OSV
added 2021/12/14 12:15 p.m.2 views

CVE-2021-44003

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The TiffLoader.dll is vulnerable to use of uninitialized memory while parsing user supplied TIFF files. This could allow an attacker to cause a denial-of-service condition...

5.5CVSS5.7AI score0.00791EPSS
Exploits0References1
OSV
OSV
added 2020/08/20 1:17 a.m.2 views

CVE-2020-15629

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.5AI score0.06341EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2019/09/17 12:0 a.m.4 views

PT-2019-13260 · Foxit · Foxit Studio Photo

Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6.909 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS7.7AI score0.03852EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2019/09/17 12:0 a.m.5 views

PT-2019-13259 · Foxit · Foxit Studio Photo

Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6.909 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

7.8CVSS7.9AI score0.03852EPSS
Exploits0References3
CNVD
CNVD
added 2018/02/14 12:0 a.m.2 views

Out-of-bounds memory read vulnerability in multiple Adobe products (CNVD-2018-05012)

Acrobat DC Continuous Track and so on are the United States of America, Adobe Adobe products. Acrobat DC Continuous Track is a desktop version of the continuous update of PDF solutions. reader DC Continuous Track is a PDF reading tool continuous update version. string literal parser is one of the...

6.5CVSS7.1AI score0.22848EPSS
Exploits0References1
CNVD
CNVD
added 2018/02/14 12:0 a.m.4 views

Out-of-bounds memory read vulnerability in multiple Adobe products (CNVD-2018-05013)

Acrobat DC Continuous Track and so on are the United States of America, Adobe Adobe products. Acrobat DC Continuous Track is a desktop version of the continuous update of PDF solutions. reader DC Continuous Track is a PDF reading tool continuous update version. string literal parser is one of the...

6.5CVSS7.1AI score0.13449EPSS
Exploits0References1
CNVD
CNVD
added 2018/02/14 12:0 a.m.1 views

Out-of-bounds memory read vulnerability in multiple Adobe products (CNVD-2018-05008)

Acrobat DC Continuous Track and so on are the United States of America Ordoby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution. Reader DC Continuous Track is a continuous update of the version of the PDF reading tool. XPS engi...

6.5CVSS7AI score0.13449EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/23 12:0 a.m.1 views

Multiple Memory Corruption Vulnerabilities in STDU Explorer's Handling of TIFFs

STDU Explorer is an image file and e-book format viewer. STDU Explorer has multiple memory corruption vulnerabilities in the handling of TIFF images, which can be exploited to cause the program to crash by constructing a malformed TIFF image, or can be successfully exploited to cause arbitrary co...

8AI score
Exploits0
CNVD
CNVD
added 2017/10/23 12:0 a.m.1 views

Multiple Memory Corruption Vulnerabilities in STDU Converter Lite's TIFF Processing

STDU Converter Lite is a document format conversion tool. STDU Converter Lite is the result of multiple memory corruption vulnerabilities in the handling of TIFF images, which can be exploited by attackers to cause a program crash by constructing malformed TIFF-formatted images, or successfully...

8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2016/12/22 12:0 a.m.2 views

PT-2016-7555 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagick's convert utility. A crafted TIFF document can lead to an out of bounds write, which i...

9.8CVSS6.9AI score0.05959EPSS
Exploits3References72
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.16 views

Ubuntu: Security Advisory (USN-524-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.6AI score0.1132EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.28 views

Ubuntu Update for openoffice.org/-amd64 vulnerability USN-524-1

Ubuntu Update for Linux kernel vulnerabilities USN-524-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5241.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openoffice.org/-amd64 vulnerability USN-524-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

9.3CVSS0.5AI score0.1132EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2007/10/04 9:6 p.m.53 views

USN-524-1: OpenOffice.org vulnerability

An integer overflow was discovered in the TIFF handling code in OpenOffice. If a user were tricked into loading a malicious TIFF image, a remote attacker could execute arbitrary code with user privileges...

9.3CVSS5.9AI score0.1132EPSS
Exploits0
Rows per page
Query Builder