Lucene search
+L

718 matches found

RedHat Linux
RedHat Linux
added 2021/05/18 2:44 p.m.2 views

ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS

A buffer overflow vulnerability in pcxwriterle in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

5.5CVSS6.1AI score0.02252EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
added 2021/05/13 12:0 a.m.51 views

Adobe InDesign PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

7.8CVSS4.6AI score0.05751EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/13 12:0 a.m.47 views

Adobe InDesign PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

7.8CVSS4.6AI score0.05751EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2014:1595-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.02889EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/04/15 12:0 a.m.36 views

EulerOS Virtualization 2.9.1 : python-pillow (EulerOS-SA-2021-1729)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.CVE-2020-5313 - An out-of-bounds write flaw was...

9.8CVSS7.5AI score0.04212EPSS
SaveExploits0References13
Github Security Blog
Github Security Blog
added 2021/03/18 7:55 p.m.80 views

Pillow Out-of-bounds Read

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

7.1CVSS7.7AI score0.01498EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2021/03/18 7:55 p.m.44 views

GHSA-F5G8-5QQ7-938W Pillow Out-of-bounds Read

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

8.3CVSS7.1AI score0.01498EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.38 views

EulerOS Virtualization 3.0.2.6 : python-pillow (EulerOS-SA-2021-1421)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffl...

7.1CVSS6.4AI score0.05215EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.40 views

EulerOS Virtualization for ARM 64 3.0.2.0 : python-pillow (EulerOS-SA-2021-1383)

According to the versions of the python-pillow package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG...

7.1CVSS7AI score0.05215EPSS
SaveExploits0References3
OSV
OSV
added 2021/03/05 11:2 a.m.4 views

OESA-2021-1070 python-pillow security update

Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file...

7.1CVSS7.5AI score0.01498EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/03/04 12:0 a.m.45 views

EulerOS Virtualization 3.0.6.6 : python-pillow (EulerOS-SA-2021-1515)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that ha...

7.1CVSS7AI score0.05215EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/02/24 12:0 a.m.40 views

Siemens JT2Go PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PC...

7.8CVSS5.6AI score0.03492EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/02/05 12:0 a.m.35 views

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-1273)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trust...

9.8CVSS7.6AI score0.04212EPSS
SaveExploits0References13
Veracode
Veracode
added 2021/02/03 8:5 a.m.26 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak vulnerability in WritePCXImage in coders/pcx.c allows an attacker to crash the application...

6.5CVSS3.5AI score0.01785EPSS
SaveExploits0References7Affected Software1
Ubuntu
Ubuntu
added 2021/01/20 1:43 p.m.118 views

USN-4697-2: Pillow vulnerabilities

USN-4697-1 fixed several vulnerabilities in Pillow. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Pillow incorrectly handled certain PCX image files. If a user or automated system were tricked into opening a specially-crafted...

7.1CVSS7.1AI score0.01498EPSS
SaveExploits0
OSV
OSV
added 2021/01/18 5:22 p.m.4 views

USN-4697-1 pillow vulnerabilities

It was discovered that Pillow incorrectly handled certain PCX image files. If a user or automated system were tricked into opening a specially-crafted PCX file, a remote attacker could possibly cause Pillow to crash, resulting in a denial of service. CVE-2020-35653 It was discovered that Pillow...

8.8CVSS7AI score0.01789EPSS
SaveExploits0References4
Ubuntu
Ubuntu
added 2021/01/18 5:22 p.m.141 views

USN-4697-1: Pillow vulnerabilities

It was discovered that Pillow incorrectly handled certain PCX image files. If a user or automated system were tricked into opening a specially-crafted PCX file, a remote attacker could possibly cause Pillow to crash, resulting in a denial of service. CVE-2020-35653 It was discovered that Pillow...

8.8CVSS7.2AI score0.01789EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/01/18 12:0 a.m.38 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Pillow vulnerabilities (USN-4697-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4697-1 advisory. It was discovered that Pillow incorrectly handled certain PCX image files. If a user or automated system were tricked into openin...

8.8CVSS7.3AI score0.01789EPSS
SaveExploits0References4
OSV
OSV
added 2021/01/12 9:15 p.m.6 views

CVE-2020-26994

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of PCX files. This could result in a heap-based buffer overflow. An attacker could leverage this...

8.8CVSS6.2AI score0.02091EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/12 9:15 p.m.26 views

CVE-2020-26994

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of PCX files. This could result in a heap-based buffer overflow. An attacker could leverage this...

8.8CVSS8.8AI score0.02091EPSS
SaveExploits0References1
Rows per page
Query Builder