Lucene search
+L

2490 matches found

Hacker One
Hacker One
added 2018/08/21 6:33 a.m.48 views

Valve: Malformed .BMP file in Counter-Strike 1.6 may cause shellcode injection

With the vulnerability of the GoldSource Engine, the server is able to perform remote code execution on the client, overwriting the stack when reading the BMP file. The problem is in the LoadBMP8 function, which is executed when the player connects to the server, by loading the...

1.3AI score
SaveExploits0
CNVD
CNVD
added 2018/08/14 12:0 a.m.0 views

img2cad Handles BMP Images with Denial of Service Vulnerability

Img2CAD image to cad tool is a tool that can convert image files to CAD. img2cad processing BMP images there is a denial of service vulnerability, the attacker through the construction of malformed images to cause the program to crash, successful exploitation of the vulnerability, you can execute...

7.3AI score
SaveExploits0
Mageia
Mageia
added 2018/08/10 2:37 p.m.78 views

Updated libjpeg packages fix security vulnerabilities

Updated libjpeg package fixes security vulnerabilities: It was found that libjpeg is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image CVE-2018-1152. It was found that libjpeg had a defect where, due to a mishandled EOF, a specially...

7.5CVSS2AI score0.03445EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/08/06 12:0 a.m.7 views

jpeg_encoder Heap Buffer Overflow Vulnerability

jpegencoder is an encoder for compressing images in other formats into jpeg format images. A heap buffer overflow vulnerability exists in the 'readFromBMP' function of the jpegencoder.cpp file in jpegencoder 2015-11-27 and earlier versions. An attacker could exploit this vulnerability to execute...

7.8CVSS8AI score0.0105EPSS
SaveExploits1References1
Veracode
Veracode
added 2018/08/01 2:51 a.m.23 views

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a bmp file to the application to cause an integer overflow that can crash the application...

7.4CVSS8.1AI score0.02EPSS
SaveExploits0References2Affected Software2
Veracode
Veracode
added 2018/07/26 10:9 a.m.29 views

Denial Of Service (DoS)

libgdkpixbuf2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass a BMP file to the gdkpixbufflip function in gdk-pixbuf-scale.c, causing a heap-based buffer overflow that can crash the application or cause arbitrary code to be executed...

7.8CVSS7.7AI score0.03868EPSS
SaveExploits0References8Affected Software3
Veracode
Veracode
added 2018/07/24 8:0 a.m.35 views

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a heap-based buffer overflow that occurs in the PackBitsDecode function of tifpackbits.c, causing a DoS attack when parsing an invalid bmp file...

6.5CVSS7.3AI score0.0374EPSS
SaveExploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2018/07/16 12:0 a.m.27 views

Adobe Acrobat Pro DC U3D BMP Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS2.5AI score0.08425EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/07/16 12:0 a.m.23 views

Adobe Acrobat Pro DC U3D BMP Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS2.5AI score0.08425EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/09 9:29 p.m.24 views

UBUNTU-CVE-2018-13794

A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...

9.8CVSS7.5AI score0.01545EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/07/03 12:0 a.m.6 views

Unspecified vulnerability in jpeg-compressor

jpeg-compressor is an encoder for generating JPEG format files. A security vulnerability exists in the 'bmpload' function of the stbimage.c file in jpeg-compressor version 0.1. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer overflow and application crash...

7.8CVSS7.2AI score0.01573EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2018/06/22 4:48 p.m.28 views

CVE-2018-12599

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...

8.8CVSS5.4AI score0.03295EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2018/06/21 5:18 a.m.29 views

CVE-2018-1152

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image...

6.5CVSS3AI score0.03445EPSS
SaveExploits0References2
NVD
NVD
added 2018/06/20 6:29 p.m.20 views

CVE-2018-12599

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...

8.8CVSS8.8AI score0.03295EPSS
SaveExploits1References4
Prion
Prion
added 2018/06/20 6:29 p.m.14 views

Out-of-bounds

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...

6.8CVSS8.7AI score0.03295EPSS
SaveExploits1References4Affected Software3
OSV
OSV
added 2018/06/20 6:29 p.m.28 views

CVE-2018-12599

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...

8.8CVSS8.6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2018/06/20 6:0 p.m.26 views

CVE-2018-12599

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...

8.3AI score0.03295EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2018/06/20 6:0 p.m.37 views

CVE-2018-12599

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...

8.8CVSS8.5AI score0.03295EPSS
SaveExploits1
NVD
NVD
added 2018/06/18 2:29 p.m.21 views

CVE-2018-1152

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image...

6.5CVSS6.7AI score0.03445EPSS
SaveExploits0References9
OSV
OSV
added 2018/06/18 2:29 p.m.22 views

CVE-2018-1152

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image...

6.5CVSS6.5AI score
SaveExploits0References9
Rows per page
Query Builder