Lucene search
+L

2529 matches found

OSV
OSV
added 2021/11/03 5:15 p.m.6 views

UBUNTU-CVE-2021-40985

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp...

5.5CVSS6.3AI score0.00937EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2021/11/03 4:08 p.m.62 views

CVE-2021-40985

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp...

5.5CVSS5.6AI score0.00937EPSS
SaveExploits1
CVE
CVE
added 2021/11/03 4:08 p.m.88 views

CVE-2021-40985

CVE-2021-40985 affects htmldoc prior to 1.9.12, with a stack-based buffer under-read in image_load_bmp when processing BMP images, leading to denial of service. Several advisories confirm the issue and recommend upgrading to newer HTMLDOC versions (e.g., GNU/Linux distributions advise upgrading b...

5.5CVSS5.6AI score0.00937EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/11/03 4:08 p.m.49 views

CVE-2021-40985

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp...

6.3AI score0.00937EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/11/03 12:00 a.m.5 views

PT-2021-23032 · Htmldoc +5 · Htmldoc +5

Name of the Vulnerable Software and Affected Versions: htmldoc versions prior to 1.9.12 Description: A buffer under-read vulnerability in the image load bmp function allows attackers to cause a denial of service via a crafted BMP image. This issue affects htmldoc and can be exploited by providing...

10CVSS6.7AI score0.07349EPSS
SaveExploits23References120
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:00 a.m.25 views

Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.5AI score0.02722EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:00 a.m.31 views

Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.5AI score0.02722EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:00 a.m.35 views

Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Animate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

7.8CVSS4.4AI score0.02722EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:00 a.m.35 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : ovmf Multiple Vulnerabilities (NS-SA-2021-0180)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ovmf packages installed that are affected by multiple vulnerabilities: - Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service vi...

9.8CVSS7.2AI score0.03418EPSS
SaveExploits4References13
RedHat Linux
RedHat Linux
added 2021/10/25 12:24 p.m.11 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/10/25 11:55 a.m.11 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/10/25 11:55 a.m.11 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 3:36 p.m.11 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 2:40 p.m.9 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 1:59 p.m.9 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 1:47 p.m.16 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 1:21 p.m.16 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/10/20 1:12 p.m.8 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
OSV
OSV
added 2021/09/28 4:15 p.m.12 views

CVE-2021-29365

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCropW component. This can cause a denial of service DOS...

5.5CVSS6.1AI score0.00659EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/28 4:15 p.m.19 views

Design/Logic Flaw

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCropW component. This can cause a denial of service DOS...

4.3CVSS5.4AI score0.00659EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder