Lucene search
+L

3209 matches found

CNVD
CNVD
•added 2019/10/24 12:00 a.m.•11 views

CAD Intelligent Vulnerability with Memory Corruption Vulnerability

CAD Intelligent Weak Power is a design tool for weak power equipment installation. CAD Smart Weak Power Tool has a memory corruption vulnerability when dealing with BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, it can lead...

7AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/24 12:00 a.m.•14 views

CAD Smart Garden has a memory corruption vulnerability

CAD Smart Garden is a professional garden design software. CAD Smart Garden Tool has a memory corruption vulnerability when dealing with BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, it can lead to a system denial of servi...

7AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/24 12:00 a.m.•12 views

Memory Corruption Vulnerability in CAD Quick Look Tool

CAD Quick View Tool is a CAD viewing software. CAD Quick Viewer Tool suffers from a memory corruption vulnerability when handling BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, this could result in a denial of service...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/24 12:00 a.m.•14 views

Memory Corruption Vulnerability in CAD Mini Drawing

CAD Mini Drawing is a cad drawing software. CAD Mini Drawing Tool has a memory corruption vulnerability when handling BMP images. An attacker can cause the program to crash by constructing a malformed BMP image. If successfully exploited, this could lead to a system denial of service...

6.9AI score
SaveExploits0
Veracode
Veracode
•added 2019/10/17 12:22 a.m.•48 views

Denial Of Service (DoS)

OpenJDK is vulnerable to denial of service DoS. The attack exists because it does not perform glyph bitmap image dimension check in FreetypeFontScaler...

3.7CVSS2.1AI score0.03517EPSS
SaveExploits0References18Affected Software4
BDU FSTEC
BDU FSTEC
•added 2019/10/03 12:00 a.m.•12 views

Vulnerability of the update_read_bitmap_update() function in the RDP client FreeRDP, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the updatereadbitmapupdate function in the RDP client FreeRDP arises from the execution of the operation outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS8.6AI score0.08156EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/10/03 12:00 a.m.•11 views

Vulnerability of the gdi_Bitmap_Decompress() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gdiBitmapDecompress function in the FreeRDP RDP client is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

10CVSS8.6AI score0.08357EPSS
SaveExploits1References9Affected Software4
CNVD
CNVD
•added 2019/09/29 12:00 a.m.•12 views

Memory Corruption Vulnerability in Good123 Viewer

Good123 Viewer is an image viewing software. A memory corruption vulnerability exists in Good123 Photo Viewer, which can be exploited by an attacker to cause the program to crash by constructing a malformed BMP image...

7AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
•added 2019/09/14 12:00 a.m.•203 views

Security update for rdesktop (important)

openSUSE Security Update: Security update for rdesktop Announcement ID: openSUSE-SU-2019:2135-1 Rating: important References: 1121448 Cross-References: CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 CVE-2018-20182...

9.8CVSS7.1AI score0.08214EPSS
SaveExploits9References1
CNVD
CNVD
•added 2019/08/26 12:00 a.m.•16 views

BMP image processing binary vulnerability in Windshield Viewer

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

6.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2019/08/19 12:00 a.m.•30 views

Adobe Acrobat Pro DC AcroForm Bitmap File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS5.6AI score0.08747EPSS
SaveExploits0References1
OSV
OSV
•added 2019/08/18 7:15 p.m.•7 views

DEBIAN-CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

5.5CVSS6.8AI score0.01707EPSS
SaveExploits1References1
OSV
OSV
•added 2019/08/18 7:15 p.m.•6 views

DEBIAN-CVE-2019-15144

In DjVuLibre 3.5.27, the sorting functionality aka GArrayTemplate::sort allows attackers to cause a denial-of-service application crash due to an Uncontrolled Recursion by crafting a PBM image file that is mishandled in libdjvu/GContainer.h...

5.5CVSS5.6AI score0.01774EPSS
SaveExploits1References1
NVD
NVD
•added 2019/08/18 7:15 p.m.•27 views

CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

5.5CVSS5.5AI score0.01707EPSS
SaveExploits1References14
UbuntuCve
UbuntuCve
•added 2019/08/18 7:15 p.m.•34 views

CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

5.5CVSS6.2AI score0.01707EPSS
SaveExploits1References2
OSV
OSV
•added 2019/08/18 7:15 p.m.•29 views

UBUNTU-CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

6.5CVSS5.9AI score0.01707EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2019/08/18 6:30 p.m.•77 views

CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

5.5CVSS4.8AI score0.01707EPSS
SaveExploits1
Mend
Mend
•added 2019/08/18 6:30 p.m.•3 views

CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

6.8CVSS0.01707EPSS
SaveExploits1References21
CVE
CVE
•added 2019/08/18 6:30 p.m.•192 views

CVE-2019-15143

CVE-2019-15143 affects DjVuLibre 3.5.27 and is caused by a denial-of-service vulnerability in the bitmap reader. A crafted image can trigger a GBitmap::read_rle_raw infinite loop, leading to resource exhaustion. Affected components include libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp. Public advis...

5.5CVSS5.3AI score0.01707EPSS
SaveExploits1References14Affected Software1
CNVD
CNVD
•added 2019/08/18 12:00 a.m.•22 views

DjVuLibre Buffer Overflow Vulnerability (CNVD-2019-29361)

DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities. A buffer overflow vulnerability exists in DjVuLibre version 3.5.27, which stems from a failure to perform zero-byte checking in...

5.5CVSS7.1AI score0.01573EPSS
SaveExploits1References1
Rows per page
Query Builder