Lucene search
+L

133 matches found

Cvelist
Cvelist
added 2020/09/09 12:55 p.m.42 views

CVE-2020-6360

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

4.3CVSS4.6AI score0.01623EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2020/04/30 12:00 a.m.55 views

Microsoft Windows user32 DIB Scaling Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.1AI score0.01855EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/04/10 12:20 a.m.28 views

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was found in ImageMagick's DIB parsing code. If a victim opened a specially-crafted DIB file, an attacker could potentially execute arbitrary code with the privileges of the user running...

7.8CVSS8.3AI score0.03093EPSS
SaveExploits2References27Affected Software1
Veracode
Veracode
added 2020/04/10 12:20 a.m.31 views

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists if a victim opened a specially-crafted DCM, DIB, XBM, XCF or XWD file, an attacker could potentially execute arbitrary code with the privileges of the user running ImageMagick...

6.8CVSS6.1AI score0.03286EPSS
SaveExploits0References30Affected Software1
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.15 views

ImageMagick: out of bounds write ReadDIBImage and WriteDIBImage in coders/dib.c

In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file...

8.8CVSS5.8AI score0.03295EPSS
SaveExploits1References4
Prion
Prion
added 2019/04/25 5:29 p.m.20 views

Heap overflow

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

6.8CVSS8AI score0.0126EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/04/25 5:29 p.m.12 views

CVE-2019-9135

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS6AI score0.0126EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/25 5:29 p.m.25 views

CVE-2019-9135

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS8AI score0.0126EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/04/25 4:49 p.m.33 views

CVE-2019-9135

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS8AI score0.0126EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/04/02 12:00 a.m.41 views

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-1114)

According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.CVE-2019-7398 Note that Tenable Network Security has...

7.5CVSS6.9AI score0.03716EPSS
SaveExploits1References2
OSV
OSV
added 2018/12/17 8:29 p.m.8 views

DEBIAN-CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.4AI score0.02278EPSS
SaveExploits1References1
OSV
OSV
added 2018/12/17 8:29 p.m.15 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.2AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2018/12/17 8:29 p.m.36 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.8AI score0.02278EPSS
SaveExploits1References5
OSV
OSV
added 2018/12/17 8:29 p.m.10 views

UBUNTU-CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.8AI score0.02278EPSS
SaveExploits1References6
Prion
Prion
added 2018/12/17 8:29 p.m.34 views

Information disclosure

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

4.3CVSS6.3AI score0.02278EPSS
SaveExploits1References6Affected Software2
Cvelist
Cvelist
added 2018/12/17 8:00 p.m.45 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

5.7AI score0.02278EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2018/12/17 8:00 p.m.59 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS6.6AI score0.02278EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2018/12/17 8:00 p.m.63 views

CVE-2018-20189

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

6.5CVSS5.9AI score0.02278EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2018/12/17 12:00 a.m.21 views

PT-2018-3481 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.31 Description: The issue is related to the ReadDIBImage function in GraphicsMagick, which lacks proper input validation. This can be exploited by a remote attacker using a specially crafted dib file, potentially...

9.8CVSS6.8AI score0.0377EPSS
SaveExploits16References112
Tenable Nessus
Tenable Nessus
added 2018/10/15 12:00 a.m.42 views

Debian DSA-4316-1 : imagemagick - security update

This update fixes several vulnerabilities in Imagemagick, a graphical software suite. Various memory handling problems or incomplete input sanitising have been found in the coders for BMP, DIB, PICT, DCM, CUT and PSD. C Tenable Network Security, Inc. The descriptive text and package checks in thi...

8.8CVSS6.5AI score0.04479EPSS
SaveExploits2References8
Rows per page
Query Builder