Lucene search
K

2531 matches found

RedHat Linux
RedHat Linux
added 2019/11/05 9:3 p.m.5 views

edk2: Stack buffer overflow with corrupted BMP

A stack-based buffer overflow was discovered in edk2 when the HII database contains a Bitmap that claims to be 4-bit or 8-bit per pixel, but the palette contains more than 162^4 or 2562^8 colors...

6CVSS7.7AI score0.00425EPSS
Exploits0References4
CNVD
CNVD
added 2019/10/24 12:0 a.m.1 views

Memory Corruption Vulnerability in CAD Mini Drawing

CAD Mini Drawing is a cad drawing software. CAD Mini Drawing Tool has a memory corruption vulnerability when handling BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, this could lead to a system denial of service...

6.9AI score
Exploits0
CNVD
CNVD
added 2019/10/24 12:0 a.m.2 views

CAD Intelligent Vulnerability with Memory Corruption Vulnerability

CAD Intelligent Weak Power is a design tool for weak power equipment installation. CAD Smart Weak Power Tool has a memory corruption vulnerability when dealing with BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, it can lead...

7AI score
Exploits0
CNVD
CNVD
added 2019/10/24 12:0 a.m.2 views

Memory Corruption Vulnerability in CAD Quick Look Tool

CAD Quick View Tool is a CAD viewing software. CAD Quick Viewer Tool suffers from a memory corruption vulnerability when handling BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, this could result in a denial of service...

6.9AI score
Exploits0
CNVD
CNVD
added 2019/10/24 12:0 a.m.2 views

CAD Smart Garden has a memory corruption vulnerability

CAD Smart Garden is a professional garden design software. CAD Smart Garden Tool has a memory corruption vulnerability when dealing with BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, it can lead to a system denial of servi...

7AI score
Exploits0
Veracode
Veracode
added 2019/10/17 12:22 a.m.37 views

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service DoS. The attack exists because it does not perform glyph bitmap image dimension check in FreetypeFontScaler...

3.7CVSS2.1AI score0.02929EPSS
Exploits0References18Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.1 views

Vulnerability of the gdi_Bitmap_Decompress() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code

The vulnerability of the gdiBitmapDecompress function in the FreeRDP RDP client is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

10CVSS5.9AI score0.08357EPSS
Exploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.3 views

Vulnerability of the update_read_bitmap_update() function in the RDP client FreeRDP, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the updatereadbitmapupdate function in the RDP client FreeRDP arises from the execution of the operation outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS6.2AI score0.08156EPSS
Exploits1References9Affected Software5
CNVD
CNVD
added 2019/09/29 12:0 a.m.0 views

Memory Corruption Vulnerability in Good123 Viewer

Good123 Viewer is an image viewing software. A memory corruption vulnerability exists in Good123 Photo Viewer, which can be exploited by an attacker to cause the program to crash by constructing a malformed BMP image...

7AI score
Exploits0
OPENSUSE Linux
OPENSUSE Linux
added 2019/09/14 12:0 a.m.189 views

Security update for rdesktop (important)

openSUSE Security Update: Security update for rdesktop Announcement ID: openSUSE-SU-2019:2135-1 Rating: important References: 1121448 Cross-References: CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 CVE-2018-20182...

9.8CVSS7.4AI score0.08214EPSS
Exploits9References1
CNVD
CNVD
added 2019/08/26 12:0 a.m.2 views

BMP image processing binary vulnerability in Windshield Viewer

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

6.9AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2019/08/19 12:0 a.m.22 views

Adobe Acrobat Pro DC AcroForm Bitmap File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS5.6AI score0.08747EPSS
Exploits0References1
OSV
OSV
added 2019/08/18 7:15 p.m.3 views

DEBIAN-CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

5.5CVSS6.8AI score0.01707EPSS
Exploits1References1
NVD
NVD
added 2019/08/18 7:15 p.m.18 views

CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

5.5CVSS5.5AI score0.01707EPSS
Exploits1References14
OSV
OSV
added 2019/08/18 7:15 p.m.1 views

DEBIAN-CVE-2019-15144

In DjVuLibre 3.5.27, the sorting functionality aka GArrayTemplate::sort allows attackers to cause a denial-of-service application crash due to an Uncontrolled Recursion by crafting a PBM image file that is mishandled in libdjvu/GContainer.h...

5.5CVSS5.6AI score0.01774EPSS
Exploits1References1
OSV
OSV
added 2019/08/18 7:15 p.m.5 views

UBUNTU-CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

6.5CVSS5.9AI score0.01707EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2019/08/18 7:15 p.m.22 views

CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

5.5CVSS6.2AI score0.01707EPSS
Exploits1References2
CVE
CVE
added 2019/08/18 6:30 p.m.164 views

CVE-2019-15143

CVE-2019-15143 affects DjVuLibre 3.5.27 and is caused by a denial-of-service vulnerability in the bitmap reader. A crafted image can trigger a GBitmap::read_rle_raw infinite loop, leading to resource exhaustion. Affected components include libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp. Public advis...

5.5CVSS5.3AI score0.01707EPSS
Exploits1References14Affected Software1
Debian CVE
Debian CVE
added 2019/08/18 6:30 p.m.22 views

CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

5.5CVSS4.8AI score0.01707EPSS
Exploits1
CNVD
CNVD
added 2019/08/18 12:0 a.m.2 views

DjVuLibre bitmap reader component resource management error vulnerability

DjVuLibre is an open source implementation of DjVu computer file format , which includes DjVu file viewer , browser plug-ins , DjVu file decoder/encoder and other utilities. bitmap reader is one of the bitmap viewer component . A resource management error vulnerability exists in the bitmap reader...

5.5CVSS6.7AI score0.01707EPSS
Exploits1References1
Rows per page
Query Builder