Lucene search
K

767 matches found

OSV
OSV
added 2017/06/28 6:29 a.m.0 views

UBUNTU-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...

7.8CVSS7.4AI score0.01845EPSS
Exploits0References5
OSV
OSV
added 2017/06/28 6:29 a.m.2 views

DEBIAN-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...

7.8CVSS7.8AI score0.01845EPSS
Exploits0References1
OSV
OSV
added 2017/06/28 6:29 a.m.2 views

ALPINE-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...

7.8CVSS7.8AI score0.01845EPSS
Exploits0References1
CNVD
CNVD
added 2017/06/28 12:0 a.m.2 views

FFmpeg 'libavcodec/webp.c' heap buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/webp.c file in FFmpeg, which arises from the program failing to ensure that pixfmt is set. A remote attacker could use this vulnerability t...

7.8CVSS7.2AI score0.01845EPSS
Exploits0References1
Veracode
Veracode
added 2017/03/26 11:11 p.m.18 views

Denial Of Service (DoS) Via File Descriptor Leak

ImageMagick is vulnerable to denial of service DoS attacks. The library contains a file descriptor leak, allowing a malicious user to pass a webp file to the system to crash it...

5.5CVSS5.9AI score0.00894EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2017/03/06 3:51 p.m.21 views

CVE-2017-6502

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore thus, a DoS...

5.5CVSS6.1AI score0.00894EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/03/06 2:59 a.m.20 views

CVE-2017-6502

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore thus, a DoS...

5.5CVSS6.7AI score0.00894EPSS
Exploits0References1
Prion
Prion
added 2017/03/06 2:59 a.m.10 views

Design/Logic Flaw

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore thus, a DoS...

4.3CVSS5.3AI score0.00894EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/03/06 2:59 a.m.16 views

CVE-2017-6502

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore thus, a DoS...

5.5CVSS7AI score0.00894EPSS
Exploits0References2
OSV
OSV
added 2017/03/06 2:59 a.m.5 views

CVE-2017-6502

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore thus, a DoS...

5.5CVSS7.2AI score
Exploits0References2
OSV
OSV
added 2017/03/06 2:59 a.m.1 views

DEBIAN-CVE-2017-6502

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore thus, a DoS...

5.5CVSS6.7AI score0.00894EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/03/06 2:0 a.m.23 views

CVE-2017-6502

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore thus, a DoS...

6AI score0.00894EPSS
Exploits0References2
CVE
CVE
added 2017/03/06 2:0 a.m.64 views

CVE-2017-6502

CVE-2017-6502 entry is rejected and not a valid vulnerability entry.

5.5CVSS5.9AI score0.00894EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2017/03/06 2:0 a.m.33 views

CVE-2017-6502

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore thus, a DoS...

5.5CVSS5.9AI score0.00894EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/03/01 12:0 a.m.51 views

Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-3213-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3213-1 advisory. Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were...

9.8CVSS7.3AI score0.10687EPSS
Exploits0References8
Ubuntu
Ubuntu
added 2017/02/28 6:31 p.m.230 views

USN-3213-1: GD library vulnerabilities

Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbitrary code. This issue only affected...

9.8CVSS7.2AI score0.10687EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2017/02/03 3:59 p.m.21 views

CVE-2016-9085

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors...

3.3CVSS5.9AI score0.00425EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2017/01/25 12:0 a.m.29 views

GLSA-201701-61 : WebP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-61 WebP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebPs gif2webp tool. Please review the CVE identifier and bug reference for details. Impact : A remote attacker, by enticing a user to proce...

3.3CVSS5.1AI score0.00425EPSS
Exploits0References2
Fedora
Fedora
added 2016/11/19 9:33 p.m.27 views

[SECURITY] Fedora 25 Update: libwebp-0.5.1-2.fc25

WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently...

3.3CVSS3.4AI score0.00425EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/11/18 12:0 a.m.51 views

openSUSE Security Update : php5 (openSUSE-2016-1308)

This update for php5 fixes the following security issues : - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

9.8CVSS7.5AI score0.05101EPSS
Exploits0References6
Rows per page
Query Builder