Lucene search
K

41 matches found

NVD
NVD
added 2026/05/29 4:16 p.m.8 views

CVE-2018-25383

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Conve...

8.6CVSS0.00181EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/29 2:46 p.m.10 views

CVE-2018-25383 Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Conve...

8.6CVSS6.5AI score0.00181EPSS
Exploits0References3
CVE
CVE
added 2026/05/29 2:46 p.m.18 views

CVE-2018-25383

CVE-2018-25383 affects Free MP3 CD Ripper 2.8. The vulnerability is a stack-based buffer overflow in WMA file processing within the Convert function, allowing a local attacker to bypass DEP via SEH manipulation and execute arbitrary code (via a ROP chain and shellcode injection). The impact is lo...

8.6CVSS6.5AI score0.00181EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/29 2:46 p.m.10 views

EUVD-2018-21905

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Conve...

8.6CVSS6.5AI score0.00181EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.10 views

PT-2026-44861

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Conve...

8.6CVSS6.5AI score0.00181EPSS
Exploits0References4
OSV
OSV
added 2026/04/17 3:19 p.m.4 views

JLSEC-2026-134

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

3.3CVSS5.8AI score0.00216EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/18 9:47 a.m.0 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the opencc::MaxMatchSegmentation and Conversion::Convertconst char functions. An attacker can achieve unauthorized access to memory and potentially execute arbitrary code by providing specially crafted inp...

5.5CVSS6.5AI score0.0023EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-3151

Malware in sbrugna...

6.5CVSS7.3AI score0.01663EPSS
Exploits1References8
OSV
OSV
added 2025/10/02 1:52 p.m.5 views

CLSA-2025-1759413150 openexr: Fix of CVE-2024-31047

CVE-2024-31047: fix denial of service issue in convert function of exrmultipart.cpp...

3.3CVSS5.8AI score0.00216EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-31047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of...

3.3CVSS5.8AI score0.00216EPSS
Exploits1References3
Amazon
Amazon
added 2025/08/18 12:0 a.m.3 views

Medium: openexr

Issue Overview: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp. CVE-2024-31047 Affected Packages: openexr Issue Correction: Run dnf update openexr --releasever 2023.8.20250818...

3.3CVSS6.7AI score0.00216EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 7:40 a.m.4 views

CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

3.3CVSS6.5AI score0.00216EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.6 views

The vulnerability of the convert() and queryConvert() functions in the collections of POCO libraries for the C++ programming language allows a hacker to execute arbitrary code.

The vulnerability of the convert and queryConvert functions in POCO mobile phones is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS6.9AI score0.00851EPSS
Exploits0References5Affected Software2
OSV
OSV
added 2024/05/17 11:8 a.m.3 views

OESA-2024-1586 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the...

3.3CVSS6.5AI score0.00216EPSS
Exploits1References2
OSV
OSV
added 2024/05/10 11:7 a.m.3 views

OESA-2024-1549 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the...

3.3CVSS6.5AI score0.00216EPSS
Exploits1References2
Veracode
Veracode
added 2024/04/10 7:16 a.m.16 views

Denial Of Service (DoS)

OpenEXR is vulnerable to a Denial of Service DoS.The vulnerability is due to improper input validation within the convert function in exrmultipart.cpp, which results in Denial of Service if an attacker can pass a crafted input to the function...

3.3CVSS6.9AI score0.00216EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2024/04/08 11:15 p.m.1 views

DEBIAN-CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

3.3CVSS4.5AI score0.00216EPSS
Exploits1References1
OSV
OSV
added 2024/04/08 11:15 p.m.8 views

CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

3.3CVSS3.8AI score
Exploits0References1
CVE
CVE
added 2024/04/08 12:0 a.m.62 views

CVE-2024-31047

CVE-2024-31047 affects Academy Software Foundation OpenEXR v3.2.3 and earlier. A local attacker can trigger a denial of service via the convert function in exrmultipart.cpp. The connected materials consistently describe this DoS but do not publish explicit exploit details. Public advisories from ...

3.3CVSS6.5AI score0.00216EPSS
Exploits1References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 3:40 a.m.2 views

SUSE CVE-2021-34552

Pillow through 8.2.0 and PIL aka Python Imaging Library through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c...

7.5CVSS8.1AI score0.0325EPSS
Exploits0References9
Rows per page
Query Builder