Lucene search
+L

656 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/22 12:00 a.m.•3 views

CVE-2014-9836: Improper Restriction of Operations within the Bounds of a Memory Buffer

ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file...

5.5CVSS5.6AI score0.01199EPSS
SaveExploits0References2
Veracode
Veracode
•added 2017/03/21 8:27 a.m.•28 views

Denial Of Service (DoS) Through Xpm Files

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible through a flaw in the handling of xpm files...

5.5CVSS5.9AI score0.01199EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2017/03/21 7:26 a.m.•23 views

Denial Of Service (DoS) Through Xpm Files

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible through a heap overflow when parsing corrupted xpm files...

7.8CVSS8.1AI score0.01625EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2017/02/24 12:00 a.m.•72 views

openSUSE Security Update : libXpm (openSUSE-2017-292)

This update for libXpm fixes the following issues : - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security...

9.8CVSS7.6AI score0.0759EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/02/16 12:00 a.m.•69 views

SUSE SLES11 Security Update : xorg-x11-libXpm (SUSE-SU-2017:0470-1)

This update for xorg-x11-libXpm fixes the following security issue : - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315 Note that Tenable Network Security has extracted the preceding description block directly from the...

9.8CVSS7.6AI score0.0759EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2017/02/16 12:00 a.m.•52 views

SUSE SLED12 / SLES12 Security Update : libXpm (SUSE-SU-2017:0467-1)

This update for libXpm fixes the following issues : - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

9.8CVSS7.6AI score0.0759EPSS
SaveExploits0References4
OSV
OSV
•added 2017/02/15 6:29 a.m.•12 views

SUSE-SU-2017:0467-1 Security update for libXpm

This update for libXpm fixes the following issues: - A heap overflow in XPM handling could be used by attackers supplying XPM files to crash or potentially execute code. bsc1021315...

9.8CVSS9.7AI score0.0759EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/02/08 12:00 a.m.•4 views

libXpm Stack Buffer Overflow Vulnerability

libXpm is a library system for decoding XPM. A stack buffer overflow vulnerability exists in libXpm. An attacker could use this vulnerability to execute arbitrary code or cause a denial of service in an affected program...

9.8CVSS9.7AI score0.0759EPSS
SaveExploits0References1
Mageia
Mageia
•added 2017/02/02 8:11 a.m.•49 views

Updated libxpm packages fix security vulnerability

An out of boundary write has been found in libXpm before 3.5.12 which can be exploited by an attacker through maliciously crafted XPM files. To trigger the vulnerability, a program must explicitly request to also parse XPM extensions while reading files. The motif toolkit and xdm are two among so...

9.8CVSS3AI score0.0759EPSS
SaveExploits0References2
OSV
OSV
•added 2017/02/02 8:11 a.m.•17 views

MGASA-2017-0035 Updated libxpm packages fix security vulnerability

An out of boundary write has been found in libXpm before 3.5.12 which can be exploited by an attacker through maliciously crafted XPM files. To trigger the vulnerability, a program must explicitly request to also parse XPM extensions while reading files. The motif toolkit and xdm are two among so...

9.8CVSS9.3AI score0.0759EPSS
SaveExploits0References3
OSV
OSV
•added 2017/02/01 3:59 p.m.•9 views

DEBIAN-CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

9.8CVSS8.1AI score0.0759EPSS
SaveExploits0References1
OSV
OSV
•added 2017/02/01 3:59 p.m.•39 views

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

9.8CVSS7.9AI score
SaveExploits0References8
Prion
Prion
•added 2017/02/01 3:59 p.m.•29 views

Integer overflow

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

7.5CVSS8.2AI score0.0759EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2017/02/01 3:59 p.m.•7 views

ALPINE-CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

9.8CVSS8.1AI score0.0759EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/02/01 3:00 p.m.•46 views

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

9.6AI score0.0759EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2017/02/01 3:00 p.m.•40 views

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

9.8CVSS9.8AI score0.0759EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/01/30 12:00 a.m.•86 views

GLSA-201701-72 : libXpm: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201701-72 libXpm: Remote execution of arbitrary code An integer overflow was discovered in libXpms src/CrDatFrI.c file. On 64 bit systems, this allows an overflow to occur on 32 bit integers while parsing XPM extensions in a file...

9.8CVSS8.3AI score0.0759EPSS
SaveExploits0References2
Gentoo Linux
Gentoo Linux
•added 2017/01/29 12:00 a.m.•63 views

libXpm: Remote execution of arbitrary code

Background The X PixMap image format is an extension of the monochrome X BitMap format specified in the X protocol, and is commonly used in traditional X applications. Description An integer overflow was discovered in libXpm’s src/CrDatFrI.c file. On 64 bit systems, this allows an overflow to occ...

9.8CVSS9.9AI score0.0759EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/01/27 12:00 a.m.•101 views

Debian DLA-801-1 : libxpm security update

Tobias Stoeckmann discovered a vulnerability in the libXpm library that could cause a malicious attacker to execute arbitrary code via a specially crafted XPM file. For Debian 7 'Wheezy', these problems have been fixed in version 1:3.5.10-1+deb7u1. We recommend that you upgrade your libxpm...

9.8CVSS8.1AI score0.0759EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2017/01/25 1:17 p.m.•41 views

CVE-2016-10164

An integer overflow flaw leading to a heap-based buffer overflow was found in libXpm. An attacker could use this flaw to crash an application using libXpm via a specially crafted XPM file...

9.8CVSS4.1AI score0.0759EPSS
SaveExploits0References1
Rows per page
Query Builder