Lucene search
+L

518 matches found

Cvelist
Cvelist
added 2022/09/19 3:47 p.m.25 views

CVE-2022-35709 Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

5.5CVSS6.2AI score0.0039EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/19 12:0 a.m.24 views

Adobe Photoshop DCM File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

3.3CVSS2.3AI score0.00443EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/19 12:0 a.m.30 views

Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.8AI score0.0039EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/19 12:0 a.m.27 views

Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

3.3CVSS2.8AI score0.00443EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/09/16 5:16 p.m.25 views

CVE-2022-38428 Adobe Photoshop DCM File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Photoshop versions 22.5.8 and earlier and 23.4.2 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interacti...

5.5CVSS6.2AI score0.00443EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-372-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.5AI score0.03572EPSS
Exploits0References2
OSV
OSV
added 2022/06/28 1:15 p.m.1 views

DEBIAN-CVE-2021-41687

DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing. Sending specific requests to the dcmqrdb program incur the memory leak. An attacker can use it to launch a DoS attack...

7.5CVSS6.7AI score0.01633EPSS
Exploits0References1
OSV
OSV
added 2022/04/29 4:15 p.m.4 views

DEBIAN-CVE-2022-1114

A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service...

7.1CVSS6.5AI score0.01151EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/29 4:15 p.m.8 views

CVE-2022-1114

A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service...

7.1CVSS6.8AI score0.01151EPSS
Exploits0References2
NVD
NVD
added 2022/03/16 3:15 p.m.27 views

CVE-2021-42533

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

7.8CVSS0.02049EPSS
Exploits0References1
OSV
OSV
added 2022/03/16 3:15 p.m.23 views

CVE-2021-42533

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

7.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2022/03/16 3:15 p.m.19 views

Double free

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

6.8CVSS7.7AI score0.02049EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/16 2:2 p.m.26 views

CVE-2021-42533 Adobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

7.8CVSS7.9AI score0.02049EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/03/16 2:2 p.m.6 views

CVE-2021-42533 Adobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

7.8CVSS7.6AI score0.02049EPSS
Exploits0References1
CVE
CVE
added 2022/03/16 2:2 p.m.105 views

CVE-2021-42533

Product/impact summary: Adobe Bridge (versions 11.1.1 and earlier) is affected by a double‑free vulnerability in the DCM file parsing path, which could lead to arbitrary code execution in the context of the current user. Root cause: a double‑free condition during crafted DCM parsing. Impact: pote...

7.8CVSS7.6AI score0.02049EPSS
Exploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2022/03/16 2:2 p.m.85 views

CVE-2021-42533

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

7.8CVSS7.7AI score0.02049EPSS
Exploits0
NVD
NVD
added 2022/02/18 8:15 p.m.17 views

CVE-2022-24060

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS0.01538EPSS
Exploits0References1
OSV
OSV
added 2022/02/18 8:15 p.m.8 views

CVE-2022-24061

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS5AI score0.01538EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.3 views

CVE-2022-24060

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

5.5CVSS4AI score0.01538EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/02/18 8:15 p.m.20 views

CVE-2022-24059

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS0.01848EPSS
Exploits0References1
Rows per page
Query Builder