Lucene search
+L

6141 matches found

BDU FSTEC
BDU FSTEC
added 2017/02/09 12:0 a.m.10 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, stem from operations that occur outside the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to...

9.3CVSS8.2AI score0.02861EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2017/02/09 12:0 a.m.12 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.

The vulnerability in the PDF viewer software such as Adobe Reader, Document Cloud, and Adobe Acrobat lies in the execution of arbitrary code by a remote attacker after the operation escapes the buffer. This vulnerability allows a malicious actor to execute arbitrary code through parsing JPEG EXIF...

9.3CVSS8.2AI score0.0333EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2017/02/09 12:0 a.m.8 views

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the JPEG XR component in the Adobe Flash Player software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

10CVSS8.2AI score0.0502EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/02/09 12:0 a.m.54 views

openSUSE Security Update : GraphicsMagick (openSUSE-2017-214)

This update for GraphicsMagick fixes several issues. These security issues were fixed : - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped bsc1017310 - CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check...

9.8CVSS6.8AI score0.06534EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
added 2017/02/09 12:0 a.m.65 views

Debian DSA-3783-1 : php5 - security update

Several issues have been discovered in PHP, a widely-used open source general-purpose scripting language. - CVE-2016-10158 Loading a TIFF or JPEG malicious file can lead to a Denial-of-Service attack when the EXIF header is being parsed. - CVE-2016-10159 Loading a malicious phar archive can cause...

9.8CVSS7.6AI score0.13314EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2017/02/09 12:0 a.m.34 views

Debian Security Advisory DSA 3785-1 (jasper - security update)

Multiple vulnerabilities have been discovered in the JasPer library for processing JPEG-2000 images, which may result in denial of service or the execution of arbitrary code if a malformed image is processed. OpenVAS Vulnerability Test $Id: deb3785.nasl 6607 2017-07-07 12:04:25Z cfischer $...

6.8CVSS0.3AI score0.03419EPSS
SaveExploits5References1
OpenVAS
OpenVAS
added 2017/02/08 12:0 a.m.57 views

Debian Security Advisory DSA 3783-1 (php5 - security update)

Several issues have been discovered in PHP, a widely-used open source general-purpose scripting language. CVE-2016-10158 Loading a TIFF or JPEG malicious file can lead to a Denial-of-Service attack when the EXIF header is being parsed. CVE-2016-10159 Loading a malicious phar archive can cause an...

7.5CVSS0.9AI score0.13314EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/02/08 12:0 a.m.26 views

Debian: Security Advisory (DSA-3785-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.03419EPSS
SaveExploits5References3
Veracode
Veracode
added 2017/02/07 1:38 a.m.31 views

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service DoS attacks. A malicious user can pass a malicious jpeg file to the system to cause an out-of-bounds heap-memory access which can cause the system to crash...

6.8CVSS7.9AI score0.02069EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2017/02/03 4:59 p.m.4 views

UBUNTU-CVE-2016-4797

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

5.5CVSS6.8AI score0.02026EPSS
SaveExploits0References2
OSV
OSV
added 2017/02/03 4:59 p.m.4 views

DEBIAN-CVE-2016-4797

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

5.5CVSS8.6AI score0.02026EPSS
SaveExploits0References1
NVD
NVD
added 2017/02/02 4:59 p.m.19 views

CVE-2016-6237

The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...

5.5CVSS5.3AI score0.00871EPSS
SaveExploits0References2
Prion
Prion
added 2017/02/02 4:59 p.m.15 views

Out-of-bounds

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file...

4.3CVSS7AI score0.00871EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2017/02/02 4:59 p.m.17 views

CVE-2016-6234

The processfile function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service crash via a crafted jpeg file...

5.5CVSS5.3AI score0.00871EPSS
SaveExploits0References2
NVD
NVD
added 2017/02/02 4:59 p.m.18 views

CVE-2016-6236

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file...

5.5CVSS5.3AI score0.00871EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2017/02/02 4:59 p.m.26 views

CVE-2016-6235

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...

5.5CVSS6.1AI score0.00871EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2017/02/02 4:59 p.m.30 views

CVE-2016-6238

The writeujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds read via a crafted jpeg file...

5.5CVSS6.1AI score0.00871EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2017/02/02 4:59 p.m.30 views

CVE-2016-6237

The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...

5.5CVSS6.1AI score0.00871EPSS
SaveExploits0References2
Prion
Prion
added 2017/02/02 4:59 p.m.12 views

Design/Logic Flaw

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...

4.3CVSS7AI score0.00871EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2017/02/02 4:59 p.m.18 views

CVE-2016-6238

The writeujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds read via a crafted jpeg file...

5.5CVSS5.3AI score0.00871EPSS
SaveExploits0References2
Rows per page
Query Builder