Lucene search
+L

6101 matches found

ATTACKERKB
ATTACKERKB
added 2011/08/31 11:55 p.m.4 views

CVE-2009-5063

Memory leak in the embeddedprofilelen function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an...

5CVSS5.6AI score0.01496EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2011/08/31 11:0 p.m.29 views

CVE-2009-5063

Memory leak in the embeddedprofilelen function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an...

8.3AI score0.01496EPSS
SaveExploits0References5
CVE
CVE
added 2011/08/31 11:0 p.m.66 views

CVE-2006-7244

CVE-2006-7244 describes a memory leak/DoS in libpng when processing JPEG images with an iCCP chunk and a negative embedded profile length. Affected versions are libpng 1.2.13beta1 and other releases before 1.2.15beta3; exploitation can lead to a memory leak or segmentation fault. The issue arises...

5CVSS6.5AI score0.01239EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2011/08/31 11:0 p.m.75 views

CVE-2009-5063

The CVE-2009-5063 issue affects libpng prior to 1.2.39beta5, caused by a memory leak in embedded_profile_len (pngwutil.c) that enables DoS via a JPEG image containing an iCCP chunk with a negative embedded profile length. This stems from an incomplete fix for CVE-2006-7244. Impact is memory leak ...

5CVSS8.2AI score0.01496EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2011/08/31 11:0 p.m.30 views

CVE-2006-7244

Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length...

6.3AI score0.01239EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2011/08/31 12:0 a.m.25 views

CVE-2009-5063

Memory leak in the embeddedprofilelen function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an...

5CVSS5.9AI score0.01496EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2011/08/23 12:0 a.m.20 views

Fedora 15 : nip2-7.24.2-1.fc15 / vips-7.24.7-2.fc15 (2011-10808)

7.24 series. Run-time code generation Open via disc mode Workspace as Graph mode for nip2 FITS image format VIPS rewrite Better nibs in paintbox Better TIFF and JPEG load Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

6.9CVSS5.5AI score0.00432EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2011/08/23 12:0 a.m.21 views

Fedora 14 : nip2-7.24.2-1.fc14 / vips-7.24.7-2.fc14 (2011-10781)

7.24 series. Run-time code generation Open via disc mode Workspace as Graph mode for nip2 FITS image format VIPS rewrite Better nibs in paintbox Better TIFF and JPEG load Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

6.9CVSS5.5AI score0.00432EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2011/08/18 12:0 a.m.26 views

CentOS Update for firefox CESA-2011:0885 centos4 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2011:0885 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

10CVSS0.6AI score0.75691EPSS
SaveExploits20References2
Tenable Nessus
Tenable Nessus
added 2011/08/15 12:0 a.m.56 views

CentOS 4 : seamonkey (CESA-2011:0888)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

10CVSS8.7AI score0.75691EPSS
SaveExploits20References15
Cent OS
Cent OS
added 2011/08/14 9:51 p.m.79 views

seamonkey security update

CentOS Errata and Security Advisory CESA-2011:0888 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS ba...

10CVSS7.7AI score0.75691EPSS
SaveExploits20References8
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.42 views

CentOS Update for java CESA-2009:1201 centos5 i386

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2009:1201 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

10CVSS0.4AI score0.3038EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.30 views

CentOS Update for netpbm CESA-2009:0012 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS7.4AI score0.03214EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.26 views

CentOS Update for gd CESA-2010:0003 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS6.6AI score0.08171EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2011/08/05 12:0 a.m.32 views

Google Picasa JPEG Image Processing Remote Code Execution Vulnerability (Windows)

This host is installed with google picasa and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglepicasajpegimgcodeexecvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Picasa JPEG Image Processing Remote Code Execution Vulnerability Windows Authors:...

9.3CVSS0.7AI score0.04295EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2011/08/05 12:0 a.m.27 views

Google Picasa JPEG Image Processing Remote Code Execution Vulnerability - Windows

google picasa is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.4AI score0.04295EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2011/08/04 12:0 a.m.42 views

QuickTime < 7.7 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7. As such, it reportedly may be affected by the following vulnerabilities : - A buffer overflow in QuickTime's handling of pict files may lead to an application crash or arbitrary code execution. CVE-2011-0245 - A buff...

9.3CVSS7.2AI score0.60106EPSS
SaveExploits17References26
Tenable Nessus
Tenable Nessus
added 2011/07/29 12:0 a.m.23 views

Google Picasa <= 3.6 Build 105.61 JPEG Image Handling Remote Code Execution

The version of Google Picasa running on the remote host is earlier than 3.6 Build 105.67. As such, it reportedly does not properly handle JPEG image files with invalid properties. If a remote attacker can trick a user into opening a specially crafted JPEG file with the affected application, he...

9.3CVSS6.1AI score0.04295EPSS
SaveExploits1References1
NVD
NVD
added 2011/07/28 6:55 p.m.29 views

CVE-2011-2747

Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file...

9.3CVSS7.4AI score0.04295EPSS
SaveExploits1References5
Prion
Prion
added 2011/07/28 6:55 p.m.25 views

Code injection

Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file...

9.3CVSS8AI score0.04295EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder