Lucene search
+L

206 matches found

CNVD
CNVD
added 2021/03/16 12:00 a.m.66 views

IrfanView WPG plugin out-of-bounds read vulnerability

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. An out-of-bounds read vulnerability exists in IrfanView WPG plugin, which can be exploited by remote attackers to execute arbitrary code...

9.8CVSS6.3AI score0.04477EPSS
SaveExploits2References1
CNVD
CNVD
added 2021/02/21 12:00 a.m.57 views

IrfanView WPG plugin out-of-bounds writing vulnerability

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. An out-of-bounds write vulnerability in IrfanView WPG plugin allows remote attackers to submit special requests that could crash the application or execute arbitrary code in the application...

7.5CVSS6.7AI score0.37988EPSS
SaveExploits2References1
OSV
OSV
added 2021/02/17 4:15 p.m.14 views

CVE-2021-27224

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

7.5CVSS6.1AI score0.37988EPSS
SaveExploits2References3
OSV
OSV
added 2021/02/17 4:15 p.m.12 views

CVE-2021-27362

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

9.8CVSS7.6AI score0.04477EPSS
SaveExploits1References2
NVD
NVD
added 2021/02/17 4:15 p.m.32 views

CVE-2021-27224

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

7.5CVSS0.37988EPSS
SaveExploits2References3
NVD
NVD
added 2021/02/17 4:15 p.m.33 views

CVE-2021-27362

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

9.8CVSS0.04477EPSS
SaveExploits1References2
Prion
Prion
added 2021/02/17 4:15 p.m.23 views

Code injection

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

7.5CVSS9.7AI score0.04477EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/02/17 4:15 p.m.30 views

Code injection

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

5CVSS7.9AI score0.37988EPSS
SaveExploits2References3Affected Software1
attackerkb
attackerkb
added 2021/02/17 4:15 p.m.8 views

CVE-2021-27224

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

7.5CVSS7.9AI score0.37988EPSS
SaveExploits2References4
CVE
CVE
added 2021/02/17 3:44 p.m.101 views

CVE-2021-27224

The CVE-2021-27224 entry concerns IrfanView 4.57 with the WPG plugin (WPG.dll) prior to version 3.1.0.0. A user-mode write access violation in WPG (starting at WPG+0x...12ec6) could allow remote attackers to execute arbitrary code. Public sources consistently describe an out-of-bounds/write condi...

7.5CVSS7.8AI score0.37988EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2021/02/17 3:44 p.m.36 views

CVE-2021-27224

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code...

8.1AI score0.37988EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2021/02/17 3:44 p.m.37 views

CVE-2021-27362

The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPGW+0x0000000000000133, which might allow remote attackers to execute arbitrary code...

9.9AI score0.04477EPSS
SaveExploits1References2
CVE
CVE
added 2021/02/17 3:44 p.m.75 views

CVE-2021-27362

The CVE-2021-27362 entry concerns the IrfanView WPG plugin (older than 3.1.0.0) used with IrfanView 4.57, where a Read Access Violation on control flow (WPG!ReadWPG_W+0x…133) could allow remote attackers to execute arbitrary code. This vulnerability is described across multiple sources as an out-...

9.8CVSS9.7AI score0.04477EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/02/17 12:00 a.m.14 views

IrfanView 缓冲区错误漏洞

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. An out-of-bounds write vulnerability in IrfanView WPG plugin allows remote attackers to submit special requests that could crash the application or execute arbitrary code in the application...

7.5CVSS7.5AI score0.37988EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2021/02/17 12:00 a.m.17 views

IrfanView Buffer Error Vulnerability

IrfanView is an image viewer by the individual developer Irfan Skiljan from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in WPG plugin before 3.1.0.0 for IrfanView 4.57, which can be exploited by remote...

9.8CVSS7.6AI score0.04477EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.17 views

The vulnerability of the ReadWPGImage function (coders/wpg.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadWPGImage function coders/wpg.c in the cross-platform library for working with graphics, GraphicsMagick, is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created WPG file...

10CVSS8AI score0.02326EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.10 views

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS8.4AI score0.03748EPSS
SaveExploits1References14Affected Software2
Veracode
Veracode
added 2019/06/21 6:27 a.m.36 views

Denial Of Service (DoS)

ImageMagick is susceptible to denial of service DoS. The attack is possible due to the lack of proper validation of input WPG image in the ReadWPGImage function in coders/wpg.c, allowing an attacker to trigger ImportIndexQuantumType invalid write or crash the application...

8.8CVSS8.1AI score0.02326EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:00 a.m.8 views

The vulnerability of the cross-platform library for working with GraphicsMagick allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the cross-platform library for working with GraphicsMagick is related to buffer overflows during reading WPG formats. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or execute arbitrary code using a color map with a large number of...

9.8CVSS8.5AI score0.03466EPSS
SaveExploits0References4Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2018/08/28 8:33 a.m.19 views

graphicsmagick/coder_WPG_fuzzer: Use-of-uninitialized-value in BlendCompositePixel

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5736103441596416 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderWPGfuzzer Fuzz target binary: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder