Lucene search
+L

718 matches found

Prion
Prion
added 2021/01/12 9:15 a.m.33 views

Buffer overflow

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

5.8CVSS7.5AI score0.01498EPSS
SaveExploits0References4Affected Software3
Debian CVE
Debian CVE
added 2021/01/12 8:2 a.m.56 views

CVE-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

7.1CVSS6.7AI score0.01498EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/01/12 8:2 a.m.58 views

CVE-2020-35653

In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations...

7.1CVSS8AI score0.01498EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:0 a.m.35 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.6AI score0.01199EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/01/12 12:0 a.m.25 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.7AI score0.01199EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.6 views

The vulnerability of the PCX P library for image processing in Pillow allows a hacker to trigger a service failure.

The vulnerability of the PCX P library for image processing in Pillow relates to the issue of the operation exceeding the buffer boundaries in memory during the encoding of PCX images. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

9.8CVSS6.7AI score0.0369EPSS
SaveExploits0References14Affected Software6
CNVD
CNVD
added 2020/12/17 12:0 a.m.28 views

IrfanView out-of-bounds write vulnerability

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. An out-of-bounds write vulnerability exists in IrfanView when parsing files of type .pcx. No detailed vulnerability details are available at this time...

7.5CVSS3.8AI score0.0439EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/16 6:15 p.m.4 views

CVE-2020-35133

irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at iview32+0xdb60...

7.5CVSS7.1AI score0.0439EPSS
SaveExploits1References2
NVD
NVD
added 2020/12/16 6:15 p.m.21 views

CVE-2020-35133

irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at iview32+0xdb60...

7.5CVSS7.6AI score0.0439EPSS
SaveExploits1References2
Prion
Prion
added 2020/12/16 6:15 p.m.12 views

Design/Logic Flaw

irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at iview32+0xdb60...

5CVSS7.5AI score0.0439EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/12/16 5:5 p.m.20 views

CVE-2020-35133

irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at iview32+0xdb60...

7.6AI score0.0439EPSS
SaveExploits1References2
CVE
CVE
added 2020/12/16 5:5 p.m.78 views

CVE-2020-35133

CVE-2020-35133 affects IrfanView 4.56, with an out-of-bounds write when parsing PCX files. The issue occurs in i_view32 at offset 0xdb60, per public descriptions. No exploitation details or fixes are provided in the connected documents. This CVE entry is supported by multiple sources (NVD, Red Ha...

7.5CVSS7.5AI score0.0439EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2020/12/16 12:0 a.m.10 views

IrfanView 代码问题漏洞

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. An out-of-bounds write vulnerability exists in IrfanView when parsing files of type .pcx. No detailed vulnerability details are available at this time...

7.5CVSS7.1AI score0.0439EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2020/11/06 12:0 a.m.38 views

EulerOS Virtualization 3.0.6.6 : python-pillow (EulerOS-SA-2020-2473)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.CVE-2020-10177 - In libImaging/PcxDecode.c i...

5.5CVSS7AI score0.01468EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/10/30 12:0 a.m.32 views

EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2020-2266)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.CVE-2020-10177 - In libImaging/PcxDecode.c in Pillow before...

5.5CVSS6.9AI score0.01468EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/10/21 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-2227)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.0369EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:0 a.m.51 views

EulerOS Virtualization 3.0.2.2 : python-pillow (EulerOS-SA-2020-2227)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.CVE-2020-5312 Note that Tenable Network Securit...

9.8CVSS6.6AI score0.0369EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/28 12:0 a.m.47 views

EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2020-2080)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have...

10CVSS7.3AI score0.07871EPSS
SaveExploits0References5
CNVD
CNVD
added 2020/09/18 12:0 a.m.5 views

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53166)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted PCX file...

4.3CVSS6.8AI score0.01623EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/09/10 12:0 a.m.32 views

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

7.8CVSS4.5AI score0.01623EPSS
SaveExploits0References1
Rows per page
Query Builder