Lucene search
+L

60 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:19 p.m.4 views

Malicious code in load-image-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:19 p.m.7 views

MAL-2022-4340 Malicious code in load-image-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2021/06/09 2:15 p.m.8 views

CVE-2021-27622

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CDrawRaster::LoadImageFromMemory whic...

5.9CVSS7.3AI score0.01208EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/06/09 12:0 a.m.7 views

PT-2021-17557 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

5.9CVSS5.8AI score0.01208EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.7 views

SAP Internet Graphics Service 缓冲区错误漏洞

SAP Internet Graphics Service is a component of the SAP R/3 enterprise environment that provides graphics services. A memory corruption vulnerability exists in SAP Internet Graphics Service that originates from an input validation error in CDrawRaster::LoadImageFromMemory. An unauthenticated...

5.9CVSS5.7AI score0.01208EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.6 views

The vulnerability of the load_image function in the libcaca graphics library allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the loadimage function in the libcaca graphics library is related to integer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...

9.3CVSS6.4AI score0.01806EPSS
Exploits1References11Affected Software6
CNVD
CNVD
added 2019/06/14 12:0 a.m.4 views

Artifex Software MuPDF Code Issue Vulnerability

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A code issue vulnerability exists in the 'fzloadjpeg' function in Artifex Software MuPDF version 1.14. The vulnerability stems from an improperly designed or implemented code development process for a networked...

9.8CVSS7.6AI score0.03215EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.7 views

The vulnerability of the load_image function in the graphics library libcaca allows a hacker to execute arbitrary code.

The vulnerability of the loadimage function in the graphic library libcaca is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS6.9AI score0.02389EPSS
Exploits1References11Affected Software6
OSV
OSV
added 2018/12/31 12:0 a.m.5 views

UBUNTU-CVE-2018-20815

In QEMU 3.1.0, loaddevicetree in devicetree.c calls the deprecated loadimage function, which has a buffer overflow risk...

9.8CVSS7.2AI score0.04428EPSS
Exploits0References4
OSV
OSV
added 2018/12/28 4:29 p.m.2 views

DEBIAN-CVE-2018-20548

There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 1bpp data...

8.8CVSS6AI score0.01806EPSS
Exploits1References1
OSV
OSV
added 2018/12/28 4:29 p.m.2 views

DEBIAN-CVE-2018-20545

There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 4bpp data...

8.8CVSS6.9AI score0.02389EPSS
Exploits1References1
CNVD
CNVD
added 2018/12/28 12:0 a.m.5 views

libcaca illegal write memory access vulnerability (CNVD-2019-08078)

libcaca is a software library that converts images to color ASCII art. An illegal write memory access vulnerability exists in the loadimage function in common-image.c in libcaca 0.99.beta19, which can be exploited by an attacker to execute arbitrary code...

8.8CVSS7.9AI score0.01806EPSS
Exploits1References1
CNVD
CNVD
added 2018/12/28 12:0 a.m.6 views

Libcaca Illegal Write Memory Access Vulnerability

libcaca is a software library that converts images to color ASCII art. An illegal write memory access vulnerability exists in the loadimage function in common-image.c in libcaca 0.99.beta19, which can be exploited by an attacker to execute arbitrary code...

8.8CVSS7.5AI score0.02389EPSS
Exploits1References1
OSV
OSV
added 2018/12/28 12:0 a.m.8 views

UBUNTU-CVE-2018-20548

There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 1bpp data...

8.8CVSS5.8AI score0.01806EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.18 views

The vulnerability of the load_image function in the GIMP graphic editor, related to reading beyond the buffer limit of memory, allows attackers to cause system failures, undermine data integrity, and compromise confidentiality.

The vulnerability of the loadimage function in the GIMP graphic editor’s plug-ins/common/file-gbr.c file is related to the issue of data being written beyond the buffer boundaries when processing UTF-8 formatted data. Exploiting this vulnerability can allow an attacker to cause service failures,...

7.8CVSS6.7AI score0.01463EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/12/21 9:29 a.m.4 views

ALPINE-CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

8.8CVSS7.4AI score0.02006EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2018/11/22 12:0 a.m.5 views

PT-2018-2597 · Libcaca +2 · Libcaca +2

Name of the Vulnerable Software and Affected Versions: libcaca version 0.99.beta19 Description: The issue is related to an integer overflow in the load image function, located in common-image.c, which can lead to an illegal WRITE memory access, particularly for 4bpp data. This can potentially all...

9.3CVSS7AI score0.02389EPSS
Exploits9References92
Prion
Prion
added 2011/06/06 7:55 p.m.18 views

Integer overflow

Multiple integer overflows in the loadimage function in file-pcx.c in the Personal Computer Exchange PCX plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based...

6.8CVSS8.6AI score0.05325EPSS
Exploits0References10Affected Software1
RedHat Linux
RedHat Linux
added 2011/05/31 2:3 p.m.5 views

Gimp: Integer overflow in the PCX image file plug-in

Multiple integer overflows in the loadimage function in file-pcx.c in the Personal Computer Exchange PCX plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based...

6.8CVSS6.5AI score0.05325EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2011/05/31 1:59 p.m.15 views

Gimp: Integer overflow in the PCX image file plug-in

Multiple integer overflows in the loadimage function in file-pcx.c in the Personal Computer Exchange PCX plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based...

6.8CVSS6.5AI score0.05325EPSS
Exploits0References4
Rows per page
Query Builder