Lucene search
+L

485 matches found

CNVD
CNVD
added 2018/05/14 12:00 a.m.9 views

xpdf 'DCTStream::readHuffSym' function denial of service vulnerability

Xpdf is an open source PDF reader developed by Foo Labs , it supports decoding LZW compressed format files and read encrypted PDF files.DCT decoder is one of the DCT decoder . Xpdf 4.00 before the version of the DCT decoder in the Stream.cc file 'DCTStream::readHuffSym' function has a security...

7.8CVSS7.4AI score0.01276EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/05/14 12:00 a.m.36 views

CVE-2018-11033

The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted JPEG data...

8.1AI score0.01276EPSS
SaveExploits0References1
Prion
Prion
added 2018/04/29 9:29 p.m.50 views

Design/Logic Flaw

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exifreaddata in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exifiifaddvalue mishandles the case of a MakerNote that lacks a final '\0' character...

6.8CVSS8.4AI score0.07159EPSS
SaveExploits0References13Affected Software3
Cvelist
Cvelist
added 2018/04/29 9:00 p.m.56 views

CVE-2018-10549

An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. exifreaddata in ext/exif/exif.c has an out-of-bounds read for crafted JPEG data because exifiifaddvalue mishandles the case of a MakerNote that lacks a final '\0' character...

7.9AI score0.07159EPSS
SaveExploits0References13
OSV
OSV
added 2017/10/11 3:29 a.m.4 views

ALPINE-CVE-2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...

6.5CVSS6.9AI score0.02365EPSS
SaveExploits1References1
OSV
OSV
added 2017/10/11 3:29 a.m.4 views

DEBIAN-CVE-2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...

6.5CVSS6.3AI score0.02365EPSS
SaveExploits1References1
OSV
OSV
added 2017/10/11 3:29 a.m.26 views

CVE-2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...

6.5CVSS6.5AI score
SaveExploits0References3
OSV
OSV
added 2017/10/11 3:29 a.m.10 views

AZL-43567 CVE-2017-15232 affecting package gdal 3.6.3-5

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...

6.5CVSS6.5AI score0.02365EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2017/10/11 3:00 a.m.69 views

CVE-2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...

6.5CVSS6.6AI score0.02365EPSS
SaveExploits1
Cvelist
Cvelist
added 2017/10/11 3:00 a.m.37 views

CVE-2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...

6.4AI score0.02365EPSS
SaveExploits1References3
CNVD
CNVD
added 2017/10/11 12:00 a.m.11 views

libjpeg-turbo null pointer dereference vulnerability

libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, AVX2, NEON, AltiVec to accelerate baseline JPEG compression and decompression on x86, x86-64, ARM and PowerPC systems. A null pointer dereference vulnerability exists in libjpeg-turbo, which can be exploited to cause a nul...

6.5CVSS6.5AI score0.02365EPSS
SaveExploits1References1
Prion
Prion
added 2017/10/10 1:29 p.m.25 views

Design/Logic Flaw

libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...

4.3CVSS6.8AI score0.03235EPSS
SaveExploits0References11Affected Software3
UbuntuCve
UbuntuCve
added 2017/10/10 12:00 a.m.37 views

CVE-2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...

6.5CVSS6.7AI score0.02365EPSS
SaveExploits1References2
OSV
OSV
added 2017/10/10 12:00 a.m.7 views

UBUNTU-CVE-2014-9092

libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...

6.5CVSS6.8AI score0.03235EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2017/10/10 12:00 a.m.31 views

CVE-2014-9092

libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...

6.5CVSS6.8AI score0.03235EPSS
SaveExploits0References4
OSV
OSV
added 2017/10/10 12:00 a.m.6 views

UBUNTU-CVE-2017-15232

libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file...

6.5CVSS6.6AI score0.02365EPSS
SaveExploits1References3
OSV
OSV
added 2017/09/05 6:29 p.m.3 views

ALPINE-CVE-2017-2862

An exploitable heap overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability...

7.8CVSS8.3AI score0.04599EPSS
SaveExploits3References1
OSV
OSV
added 2017/09/05 12:00 a.m.10 views

UBUNTU-CVE-2017-2862

An exploitable heap overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability...

8.8CVSS7.5AI score0.04599EPSS
SaveExploits3References4
RedhatCVE
RedhatCVE
added 2017/09/01 5:48 p.m.29 views

CVE-2017-13769

The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service buffer over-read by sending a crafted JPEG file...

6.5CVSS3.9AI score0.01398EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/31 12:00 a.m.11 views

ImageMagick Denial of Service Vulnerability (CNVD-2017-24316)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WriteTHUMBNAILImage' function in the coders/thumbnail.c file in...

6.5CVSS6AI score0.01398EPSS
SaveExploits0References1
Rows per page
Query Builder