Lucene search
+L

97 matches found

OSV
OSV
added 2019/07/05 1:15 a.m.7 views

ALPINE-CVE-2019-13299

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel...

8.8CVSS7.1AI score0.02281EPSS
SaveExploits1References1
Prion
Prion
added 2019/07/05 1:15 a.m.24 views

Heap overflow

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel...

6.8CVSS8.6AI score0.02281EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
added 2019/07/05 12:52 a.m.33 views

CVE-2019-13299

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel...

8.6AI score0.02281EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2019/07/05 12:51 a.m.72 views

CVE-2019-13298

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error...

8.8CVSS8.4AI score0.0237EPSS
SaveExploits1
CNVD
CNVD
added 2019/07/05 12:0 a.m.9 views

ImageMagick heap buffer overflow vulnerability (CNVD-2019-21664)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio A buffer overflow vulnerability exists in the 'GetPixelChannel' function of t...

8.8CVSS7.2AI score0.02281EPSS
SaveExploits1References1
exploitpack
exploitpack
added 2018/09/18 12:0 a.m.18 views

Microsoft Edge Chakra - PathTypeHandlerBase::SetAttributesHelper Type Confusion

Microsoft Edge Chakra - PathTypeHandlerBase::SetAttributesHelper Type Confusion / Here's a snippet of PathTypeHandlerBase::SetAttributesHelper. PathTypeHandlerBase predTypeHandler = this; DynamicType currentType = instance-GetDynamicType; while predTypeHandler-GetPathLength propertyIndex...

SaveExploits0
Packet Storm
Packet Storm
added 2018/09/18 12:0 a.m.56 views

Microsoft Edge Chakra PathTypeHandlerBase::SetAttributesHelper Type Confusion

Microsoft Edge: Chakra: Type confusion with PathTypeHandlerBase::SetAttributesHelper CVE-2018-8384 Here's a snippet of PathTypeHandlerBase::SetAttributesHelper. PathTypeHandlerBase predTypeHandler = this; DynamicType currentType = instance-GetDynamicType; while predTypeHandler-GetPathLength...

0.1AI score0.6211EPSS
SaveExploits3
Cvelist
Cvelist
added 2017/07/26 8:0 a.m.44 views

CVE-2017-11639

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h...

7.3AI score0.02714EPSS
SaveExploits0References5
OSV
OSV
added 2017/03/23 6:59 p.m.8 views

DEBIAN-CVE-2016-9556

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file...

5.5CVSS6.6AI score0.02277EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/02/17 12:0 a.m.10 views

ImageMagick heap buffer overflow vulnerability (CNVD-2017-01881)

ImageMagick is the United States ImageMagickStudio company's set of open source image processing software. The software can read, convert and write pictures in a variety of formats. A heap buffer overflow vulnerability exists in the MagickCore/pixel-accessor.h file in ImageMagick version 7.0.3.8....

5.5CVSS7AI score0.01832EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2017/02/16 6:0 p.m.56 views

CVE-2016-9773

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556...

5.5CVSS7.5AI score0.01832EPSS
SaveExploits0
CNVD
CNVD
added 2016/10/18 12:0 a.m.9 views

ImageMagick heap buffer overflow vulnerability (CNVD-2016-09855)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A heap buffer overflow vulnerability exists in the 'pixel-accessor.h' script in ImageMagick version 7.0.3.0 because it fails to adequately bounds-check the data before the user provides it ...

5.5CVSS7.6AI score0.01608EPSS
SaveExploits0References1
OSV
OSV
added 2016/02/16 2:59 a.m.6 views

UBUNTU-CVE-2016-0753

Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters...

5.3CVSS6.7AI score0.07157EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2015/10/25 12:0 a.m.147 views

APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007

APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007 OS X El Capitan 10.11.1 and Security Update 2015-007 are now available and address the following: Accelerate Framework Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan 10.11 Impact: Visiti...

10CVSS0.9AI score0.94859EPSS
SaveExploits61
Zero Day Initiative
Zero Day Initiative
added 2015/08/11 12:0 a.m.43 views

Microsoft Internet Explorer stack Property Descriptor Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.4CVSS6.4AI score0.23758EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2012/08/29 4:19 a.m.8 views

Mozilla: WebGL use-after-free and memory corruption (MFSA 2012-62)

Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code via vectors related to deletion of a...

10CVSS7.8AI score0.05899EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2009/11/05 12:0 a.m.16 views

Fedora 10 : rt3-3.8.2-11.fc10 (2009-10426)

Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 - Add R: perlData::ICal, R: perlData::ICal::Entry::Event BZ 507965. - Fri Jun 19 2009...

5.5AI score
SaveExploits0References2
Rows per page
Query Builder