Lucene search
K

35 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-2290

Malware in sbrugna...

7.5CVSS6.1AI score0.01904EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-0013

Malware in sbrugna...

7.5CVSS6.1AI score0.02695EPSS
Exploits0References6
seebug.org
seebug.org
added 2014/04/17 12:0 a.m.12 views

Dillo图像处理多个内存破坏漏洞

Bugtraq ID:66792 Dillo是一款小巧的网页浏览器。 Dillo处理图像存在一个整数溢出,允许攻击者利用漏洞构建恶意图像,诱使应用解析,可破坏内存,使应用程序崩溃或者可执行任意代码。 0 Dillo 3.x Dillo 3.0.4版本已修复该漏洞,建议用户下载使用: http://hg.dillo.org/...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2009/09/02 12:0 a.m.15 views

Gentoo Security Advisory GLSA 200908-10 (dillo)

The remote host is missing updates announced in advisory GLSA 200908-10. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

7.5CVSS6.6AI score0.01904EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2009/09/02 12:0 a.m.14 views

Gentoo Security Advisory GLSA 200908-10 (dillo)

The remote host is missing updates announced in advisory GLSA 200908-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.7AI score0.01904EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2009/08/20 12:0 a.m.13 views

GLSA-200908-10 : Dillo: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200908-10 Dillo: User-assisted execution of arbitrary code Tilei Wang reported an integer overflow in the Pngdatainfocallback function, possibly leading to a heap-based buffer overflow. Impact : A remote attacker could entice a us...

7.5CVSS6.4AI score0.01904EPSS
Exploits1References2
Gentoo Linux
Gentoo Linux
added 2009/08/18 12:0 a.m.19 views

Dillo: User-assisted execution of arbitrary code

Background Dillo is a graphical web browser known for its speed and small footprint. Description Tilei Wang reported an integer overflow in the Pngdatainfocallback function, possibly leading to a heap-based buffer overflow. Impact A remote attacker could entice a user to open an HTML document...

7.5CVSS7.3AI score0.01904EPSS
Exploits1
seebug.org
seebug.org
added 2009/07/07 12:0 a.m.24 views

Dillo Png_datainfo_callback()函数整数溢出漏洞

BUGTRAQ ID: 35575 CVECAN ID: CVE-2009-2294 Dillo是运行在Unix平台上的轻量级浏览器。 Dillo的Pngdatainfocallback函数在解析内嵌了PNG图形的HTML页面时存在可最终导致堆溢出的整数溢出漏洞。如果攻击者在PNG图形中指定了超长的宽度和高度值,打开该图形就可以触发这个溢出,导致执行任意代码。 Dillo Project Dillo = 2.1 厂商补丁: Dillo Project ------------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...

7.5CVSS6.4AI score0.01904EPSS
Exploits1
securityvulns
securityvulns
added 2009/07/06 12:0 a.m.24 views

Dillo browser integer overflow

Integer overflow on PNG parsing...

7.5CVSS4.9AI score0.01904EPSS
Exploits1References1Affected Software1
securityvulns
securityvulns
added 2009/07/06 12:0 a.m.64 views

[oCERT-2009-008] Dillo integer overflow

2009-008 Dillo integer overflow Description: Dillo, an open source graphical web browser, suffers from an integer overflow which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. The vulnerability is triggered by HTML pages with embedded PNG images, the...

7.5CVSS0.8AI score0.01904EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2009/07/05 4:30 p.m.17 views

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

7.5CVSS6.2AI score0.01904EPSS
Exploits1References1
OSV
OSV
added 2009/07/05 4:30 p.m.1 views

DEBIAN-CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

7.5CVSS7.7AI score0.01904EPSS
Exploits1References1
NVD
NVD
added 2009/07/05 4:30 p.m.7 views

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

7.5CVSS7.8AI score0.01904EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2009/07/05 4:0 p.m.12 views

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

7.5CVSS7.5AI score0.01904EPSS
Exploits1
Cvelist
Cvelist
added 2009/07/05 4:0 p.m.16 views

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

7.7AI score0.01904EPSS
Exploits1References4
CVE
CVE
added 2009/07/05 4:0 p.m.44 views

CVE-2009-2294

Dillo up to version 2.1 and earlier is affected by an integer overflow in the Png_datainfo_callback() function when processing crafted PNGs with large width/height. This can lead to a denial of service (crash) and possibly arbitrary code execution. Gentoo GLSA 200908-10 and the related OSS/NVL/Ne...

7.5CVSS7.9AI score0.01904EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.10 views

Gentoo Security Advisory GLSA 200501-11 (Dillo)

The remote host is missing updates announced in advisory GLSA 200501-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.02695EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.13 views

Gentoo Security Advisory GLSA 200501-11 (Dillo)

The remote host is missing updates announced in advisory GLSA 200501-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.3AI score0.02695EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.8 views

FreeBSD Ports: dillo

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS6.7AI score0.02695EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.15 views

FreeBSD Ports: dillo

The remote host is missing an update to the system as announced in the referenced advisory. VID 28ab7ddf-61ab-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.5CVSS0.1AI score0.02695EPSS
Exploits0
Rows per page
Query Builder