Lucene search
K

86 matches found

OSV
OSV
added 2019/07/05 1:15 a.m.4 views

ALPINE-CVE-2019-13295

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled...

8.8CVSS7.1AI score0.03133EPSS
Exploits1References1
OSV
OSV
added 2019/07/05 1:15 a.m.3 views

DEBIAN-CVE-2019-13295

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled...

8.8CVSS9.3AI score0.03133EPSS
Exploits1References1
OSV
OSV
added 2019/07/05 1:15 a.m.1 views

UBUNTU-CVE-2019-13295

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled...

8.8CVSS7AI score0.03133EPSS
Exploits1References4
The Hacker News
The Hacker News
added 2019/01/10 11:0 a.m.175 views

Hackers Using Zero-Width Spaces to Bypass MS Office 365 Protection

Security researchers have been warning about a simple technique that cybercriminals and email scammers are already being using in the wild to bypass security features of Microsoft Office 365, including Safe Links, which are originally designed to protect users from malware and phishing attacks...

Exploits0
The Hacker News
The Hacker News
added 2019/01/10 11:0 a.m.1 views

Hackers Using Zero-Width Spaces to Bypass MS Office 365 Protection

Security researchers have been warning about a simple technique that cybercriminals and email scammers are already being using in the wild to bypass security features of Microsoft Office 365, including Safe Links, which are originally designed to protect users from malware and phishing attacks...

6.8AI score
Exploits0
Kitploit
Kitploit
added 2018/07/28 2:32 p.m.40 views

SafeText - Script To Remove Homoglyphs And Zero-Width Characters To Allow For Safe Distribution Of Documents From Anonymous Sources

Tool to sanitize text to allow for safe distribution of documents from anonymous sources by removing zero-width characters and homoglpyhs. Individuals attempting to leak an email or other text file face the risk of identification through fingerprinting. Fingerprinting often occurs when the origin...

7.2AI score
Exploits0References1
Schneier on Security
Schneier on Security
added 2018/01/11 6:50 p.m.25 views

Fingerprinting Digital Documents

In this era of electronic leakers, remember that zero-width spaces and homoglyph substitution can fingerprint individual instances of files...

7.1AI score
Exploits0
OSV
OSV
added 2013/03/14 3:10 a.m.6 views

UBUNTU-CVE-2012-4458

The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service memory consumption and server crash via a large number of zero width elements in the client-properties map in a connection.start-ok message...

5CVSS5.8AI score0.0653EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2013/03/06 6:41 p.m.3 views

qpid-cpp: long arrays of zero-width types cause a denial of service

The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service memory consumption and server crash via a large number of zero width elements in the client-properties map in a connection.start-ok message...

5CVSS5.8AI score0.0653EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2013/03/06 6:38 p.m.1 views

qpid-cpp: long arrays of zero-width types cause a denial of service

The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service memory consumption and server crash via a large number of zero width elements in the client-properties map in a connection.start-ok message...

5CVSS5.8AI score0.0653EPSS
Exploits0References5
FreeBSD
FreeBSD
added 2009/09/21 12:0 a.m.17 views

mybb -- multiple vulnerabilities

mybb team reports: Input passed via avatar extensions is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by uploading specially named avatars. The script allows to sign up with usernames containing zero width space characters, which can be...

3.3AI score
Exploits0References4
RedHat Linux
RedHat Linux
added 2008/06/30 3:33 p.m.6 views

java-jre: GIF buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

6.8CVSS5.8AI score0.10994EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2008/05/20 2:12 p.m.3 views

java-jre: GIF buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

6.8CVSS5.8AI score0.10994EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2007/10/16 7:8 a.m.4 views

java-jre: GIF buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

6.8CVSS5.8AI score0.10994EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2007/04/25 4:47 p.m.7 views

java-jre: GIF buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

6.8CVSS5.8AI score0.10994EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2007/01/24 12:0 a.m.2 views

java-jre: GIF buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

6.8CVSS5.8AI score0.10994EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2006/12/03 7:28 p.m.0 views

CVE-2006-6238

The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077...

5CVSS8.4AI score0.0196EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2005/10/06 7:46 p.m.3 views

security flaw

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS6.2AI score0.03616EPSS
Exploits0References4
NVD
NVD
added 2005/09/23 7:3 p.m.19 views

CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS7.4AI score0.03616EPSS
Exploits0References31
UbuntuCve
UbuntuCve
added 2005/09/23 7:3 p.m.22 views

CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS6AI score0.03616EPSS
Exploits0References2
Rows per page
Query Builder