Lucene search
+L

107 matches found

CVE
CVE
added 2021/03/09 2:8 p.m.61 views

CVE-2021-21493

SAP 3D Visual Enterprise Viewer 9 is affected by GIF parsing vulnerabilities (CVE-2021-21493). Multiple connected advisories (e.g., ZDI-21-289/296/290/293/297/295/291, etc.) describe memory corruption or out-of-bounds/write conditions in GIF file parsing that can lead to remote code execution. Ex...

4.3CVSS3.6AI score0.01398EPSS
SaveExploits0References18Affected Software1
OSV
OSV
added 2021/02/10 10:15 p.m.7 views

CVE-2020-13572

A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this...

8.8CVSS7.5AI score0.01917EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2019/11/05 9:14 p.m.4 views

qt5-qtbase: QImage allocation failure in qgifhandler

An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...

8.8CVSS5.8AI score0.02424EPSS
SaveExploits0References4
Veracode
Veracode
added 2019/05/02 4:41 a.m.34 views

Arbitrary Code Execution Or Denial Of Service (DoS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

8.8CVSS9.3AI score0.11079EPSS
SaveExploits10References29Affected Software3
PyPA
PyPA
added 2019/04/24 5:29 p.m.9 views

PYSEC-2019-210

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...

6.5CVSS6.7AI score0.00472EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2019/04/24 5:29 p.m.6 views

PYSEC-2019-235

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...

6.5CVSS6.7AI score0.00472EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2019/04/24 4:30 p.m.4 views

CVE-2019-9635

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...

6.5CVSS6.7AI score0.00472EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.8 views

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, and Adobe Acrobat Document Cloud, related to the manipulation of the null pointer, allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Adobe Reader, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud are related to the handling of the null pointer. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code using a...

9.3CVSS7.7AI score0.27821EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/10/26 12:0 a.m.7 views

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to writing beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs lies in the writing of data beyond the buffer limit in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created GIF file...

10CVSS7.8AI score0.13459EPSS
SaveExploits0References5
OSV
OSV
added 2018/09/24 2:29 p.m.9 views

DEBIAN-CVE-2018-17436

ReadCode in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service invalid write access via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

6.5CVSS6.7AI score0.01312EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/04/28 12:0 a.m.3 views

Foxit Reader GIF DataSubBlock Out-of-Bounds Read Information Disclosure Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the parsing of the DataSubBlock structure of GIF graphics, which can be exploited by an attacker to obtain sensitive information due to a lack of proper validation of user-supplied data...

6.5CVSS6.5AI score0.02504EPSS
SaveExploits0References1
OSV
OSV
added 2018/04/24 7:29 p.m.2 views

ALPINE-CVE-2017-14450

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...

7.1CVSS7.4AI score0.01583EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2018/04/24 12:0 a.m.8 views

PT-2018-5052 · Corel · Core Photo-Paint X8

Name of the Vulnerable Software and Affected Versions: Core PHOTO-PAINT X8 version 18.1.0.661 Description: A memory corruption vulnerability exists in the GIF parsing functionality. This issue can be triggered by a specially crafted GIF file, potentially resulting in code execution. An attacker c...

8.8CVSS8.5AI score0.02214EPSS
SaveExploits1References4
OSV
OSV
added 2018/03/26 12:0 a.m.4 views

UBUNTU-CVE-2017-18254

An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file...

6.5CVSS6.7AI score0.01777EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/01/18 12:0 a.m.4 views

PHP GD Graphics Library Denial of Service Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community.GD Graphics Library also known as libgd or libgd2 is an open source library for dynamically creating images developed by American software...

5.5CVSS6.4AI score0.13204EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/12/07 12:0 a.m.6 views

GNU Libextractor Denial of Service Vulnerability (CNVD-2018-00306)

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in GNU Libextractor version 1.6. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference and application crash...

6.5CVSS6.8AI score0.0236EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2017/12/06 5:29 p.m.6 views

CVE-2017-17440

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

6.5CVSS5.6AI score0.0236EPSS
SaveExploits1References10
OSV
OSV
added 2017/12/06 5:29 p.m.4 views

DEBIAN-CVE-2017-17440

GNU Libextractor 1.6 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted GIF, IT Impulse Tracker, NSFE, S3M Scream Tracker 3, SID, or XM eXtended Module file, as demonstrated by the EXTRACTORxmextractmethod function in...

6.5CVSS6.7AI score0.0236EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/09/26 12:0 a.m.2 views

GraphicsGale Handles GIF File Memory Corruption Vulnerability

GraphicsGale is an image processing tool. GraphicsGale suffers from a memory corruption vulnerability when processing GIF images, which can be exploited to cause a program crash by constructing a malformed GIF image, and can lead to arbitrary code execution if successfully exploited...

8AI score
SaveExploits0
OSV
OSV
added 2017/04/12 2:59 p.m.2 views

CVE-2017-3050

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of GIF files. Successful exploitation could lead to arbitrary code execution...

7.8CVSS6AI score0.04184EPSS
SaveExploits0References4
Rows per page
Query Builder