Lucene search
+L

6150 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/10/03 12:0 a.m.33 views

Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS2.5AI score0.062EPSS
SaveExploits0References1
NVD
NVD
added 2018/10/01 8:29 p.m.30 views

CVE-2018-3999

An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a...

8.8CVSS8.1AI score0.00889EPSS
SaveExploits1References1
OSV
OSV
added 2018/10/01 8:29 p.m.6 views

CVE-2018-3999

An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a...

7.8CVSS6.3AI score0.00889EPSS
SaveExploits1References1
Prion
Prion
added 2018/10/01 8:29 p.m.24 views

Stack overflow

An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a...

6.8CVSS7.7AI score0.00889EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/10/01 8:0 p.m.35 views

CVE-2018-3999

An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used in a...

8.8CVSS7.8AI score0.00889EPSS
SaveExploits1References1
CVE
CVE
added 2018/10/01 8:0 p.m.59 views

CVE-2018-3999

Atlanti s Word Processor CVE-2018-3999 affects the JPEG parser in Atlantis Word Processor 3.2.5.0. A specially crafted embedded JPEG image can cause a length underflow, treated as unsigned, leading to a heap-based buffer overflow during decoding of JPEG markers (APPx handling) and subsequent copy...

8.8CVSS7.7AI score0.00889EPSS
SaveExploits1References1Affected Software1
Talos
Talos
added 2018/10/01 12:0 a.m.332 views

Atlantis Word Processor JPEG length underflow code execution vulnerability

Summary An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause a length to be miscalculated and underflow. This length is then treated as unsigned and then used ...

8.8CVSS7.8AI score0.00889EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2018/10/01 12:0 a.m.25 views

openSUSE Security Update : gd (openSUSE-2018-1079)

This update for gd fixes the following issues : Security issue fixed : - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434 This update was imported fr...

8.8CVSS7.8AI score0.042EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2018/10/01 12:0 a.m.10 views

PT-2018-16364 · Atlantis · Atlantis Word Processor

Name of the Vulnerable Software and Affected Versions: Atlantis Word Processor version 3.2.5.0 Description: A stack-based buffer overflow issue exists in the JPEG parser. It can be triggered by a specially crafted image embedded within a document, causing a length miscalculation and underflow. Th...

8.8CVSS8.3AI score0.00889EPSS
SaveExploits1References2
OPENSUSE Linux
OPENSUSE Linux
added 2018/09/28 9:7 p.m.85 views

Security update for gd (moderate)

This update for gd fixes the following issues: Security issue fixed: - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434 This update was imported from...

1.9AI score0.042EPSS
SaveExploits0References1
OSV
OSV
added 2018/09/27 5:51 a.m.6 views

SUSE-SU-2018:2888-1 Security update for gd

This update for gd fixes the following issues: Security issue fixed: - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434...

8.8CVSS9AI score0.042EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/09/27 12:0 a.m.30 views

Fedora 27 : hylafax+ (2018-11b966722a)

HylaFAX+ 5.6.1 ============== - address CVE-2018-17141, fixes JPEG vulnerabilities 18 Sep 2018 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

9.8CVSS8.2AI score0.05588EPSS
SaveExploits2References2
OPENSUSE Linux
OPENSUSE Linux
added 2018/09/25 3:9 p.m.64 views

Security update for gd (moderate)

This update for gd fixes the following issues: Security issue fixed: - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434 This update was imported from...

1.9AI score0.042EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2018/09/25 3:8 p.m.61 views

Security update for php7 (moderate)

This update for php7 fixes the following issues: Security issue fixed: - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434 This update was imported fr...

1.9AI score0.042EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/09/25 12:0 a.m.27 views

openSUSE Security Update : jhead (openSUSE-2018-1044)

This update for jhead fixes the following security issues : - CVE-2016-3822: jhead remote attackers to execute arbitrary code or cause a denial of service out-of-bounds access via crafted EXIF data bsc1108480. - CVE-2018-16554: The ProcessGpsInfo function may have allowed a remote attacker to cau...

7.8CVSS6.7AI score0.01766EPSS
SaveExploits1References3
CNVD
CNVD
added 2018/09/25 12:0 a.m.7 views

Denial of service vulnerability in Kingsoft pdf reader (CNVD-2018-20702)

Kingsoft PDF Reader is a compact and stable PDF reading tool. Kingsoft pdf reader has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service by embedding a specific jpeg2000 image...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/09/25 12:0 a.m.31 views

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2018:2837-1)

This update for gd fixes the following issues : Security issue fixed : CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434 Note that Tenable Network...

8.8CVSS8.3AI score0.042EPSS
SaveExploits0References4
OPENSUSE Linux
OPENSUSE Linux
added 2018/09/24 3:15 p.m.90 views

Security update for jhead (moderate)

This update for jhead fixes the following security issues: - CVE-2016-3822: jhead remote attackers to execute arbitrary code or cause a denial of service out-of-bounds access via crafted EXIF data bsc1108480. - CVE-2018-16554: The ProcessGpsInfo function may have allowed a remote attacker to caus...

7.5CVSS4.4AI score0.01766EPSS
SaveExploits1References1
OSV
OSV
added 2018/09/24 10:55 a.m.9 views

SUSE-SU-2018:2837-1 Security update for gd

This update for gd fixes the following issues: Security issue fixed: - CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr that could result in remote code execution. This could have been exploited via a specially crafted JPEG image files. bsc1105434...

8.8CVSS9AI score0.042EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/09/24 12:0 a.m.29 views

openSUSE Security Update : hylafax+ (openSUSE-2018-1027)

This update for hylafax+ fixes the following issues : Security issues fixed in 5.6.1 : - CVE-2018-17141: multiple vulnerabilities affecting fax page reception in JPEG format Specially crafted input may have allowed remote execution of arbitrary code boo1109084 Additionally, this update also...

9.8CVSS8.6AI score0.05588EPSS
SaveExploits2References2
Rows per page
Query Builder