Lucene search
+L

571 matches found

Positive Technologies
Positive Technologies
•added 2018/03/18 12:00 a.m.•8 views

PT-2018-5650 · Sdl +2 · Sdl2 Image +2

Name of the Vulnerable Software and Affected Versions: SDL2 image version 2.0.2 Description: A double-Free issue exists in the XCF image rendering functionality. This can be triggered by a specially crafted XCF image, causing a Double-Free situation. An attacker can exploit this by displaying a...

8.8CVSS6.8AI score0.02677EPSS
SaveExploits4References61
Talos
Talos
•added 2018/03/01 12:00 a.m.•42 views

Simple DirectMedia Layer SDL2_image load_xcf_tile_rle Decompression Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Tested...

8.8CVSS8.8AI score0.02395EPSS
SaveExploits0
Talos
Talos
•added 2018/03/01 12:00 a.m.•75 views

Simple DirectMedia Layer SDL2_image do_layer_surface Double-Free Vulnerability

Summary A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability. Tested Versions Simple DirectMedia Lay...

8.8CVSS8.3AI score0.01651EPSS
SaveExploits0
OSV
OSV
•added 2017/12/20 9:29 a.m.•6 views

DEBIAN-CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

5.5CVSS7.2AI score0.01127EPSS
SaveExploits0References1
Prion
Prion
•added 2017/12/20 9:29 a.m.•25 views

Stack overflow

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

4.3CVSS5.9AI score0.01127EPSS
SaveExploits0References5Affected Software3
attackerkb
attackerkb
•added 2017/12/20 9:29 a.m.•9 views

CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

5.5CVSS6.4AI score0.01127EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2017/12/20 9:00 a.m.•47 views

CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

6.3AI score0.01127EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/20 12:00 a.m.•1 views

CVE-2017-17788: Out-of-bounds Read

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

5.5CVSS6.5AI score0.01127EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/12/20 12:00 a.m.•12 views

GIMP xcf_load_stream Stack Buffer Overflow Vulnerability

GIMP GNU Image Manipulation Program, GNU Image Manipulation Program is a cross-platform open source image processing software developed by the GIMP team. The software enables a variety of image processing, including photo retouching, image compositing and image creation. A stack buffer overflow...

5.5CVSS7.2AI score0.01127EPSS
SaveExploits0References1
OSV
OSV
•added 2017/12/20 12:00 a.m.•12 views

UBUNTU-CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

5.5CVSS6.6AI score0.01127EPSS
SaveExploits0References6
Veracode
Veracode
•added 2017/12/13 5:24 a.m.•21 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a XCF file to the application to cause a out-of-bounds read that can crash the application...

6.5CVSS6.5AI score0.02991EPSS
SaveExploits0References8Affected Software1
seebug.org
seebug.org
•added 2017/11/06 12:00 a.m.•42 views

Simple DirectMedia Layer SDL_image XCF Property Handling Code Execution Vulnerability(CVE-2017-2887)

Summary An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger thi...

6.8CVSS9AI score0.02656EPSS
SaveExploits1
Mageia
Mageia
•added 2017/11/02 9:47 p.m.•40 views

Updated sdl2_image & mingw packages fix security vulnerability

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS4.2AI score0.02656EPSS
SaveExploits1References2
CNVD
CNVD
•added 2017/10/16 12:00 a.m.•57 views

SDL_image Buffer Overflow Vulnerability

SDLImage is an open source library of functions for working with graphics files. A buffer overflow vulnerability exists in the XCF attribute handling function in SDLimage version 2.0.1. An attacker can exploit this vulnerability to execute code with the help of a specially crafted xcf file...

8.8CVSS8.9AI score0.02656EPSS
SaveExploits1References1
OSV
OSV
•added 2017/10/11 6:29 p.m.•24 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.9AI score
SaveExploits0References4
NVD
NVD
•added 2017/10/11 6:29 p.m.•18 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.8AI score0.02656EPSS
SaveExploits1References4
OSV
OSV
•added 2017/10/11 6:29 p.m.•8 views

DEBIAN-CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8AI score0.02656EPSS
SaveExploits1References1
OSV
OSV
•added 2017/10/11 6:29 p.m.•10 views

ALPINE-CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8AI score0.02656EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2017/10/11 6:29 p.m.•28 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS7.5AI score0.02656EPSS
SaveExploits1References3
OSV
OSV
•added 2017/10/11 6:29 p.m.•17 views

UBUNTU-CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS7.6AI score0.02656EPSS
SaveExploits1References4
Rows per page
Query Builder