Lucene search
+L

748 matches found

Veracode
Veracode
added 2020/04/10 12:56 a.m.29 views

Arbitrary Code Execution

gimp is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially-crafted BMP or PCX image file that,...

6.8CVSS3.2AI score0.05325EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2020/04/10 12:56 a.m.34 views

Arbitrary Code Execution

gimp is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially-crafted BMP or PCX image file that,...

9.3CVSS3.2AI score0.08039EPSS
SaveExploits1References19Affected Software1
Veracode
Veracode
added 2020/04/10 12:20 a.m.32 views

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in ImageMagick's processing of certain malformed PCX images. If a victim opened a specially-crafted PCX file, an attacker could possibly execute arbitrary code on the...

6.8CVSS5.1AI score0.04484EPSS
SaveExploits2References20Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2020/03/19 12:00 a.m.27 views

Adobe Photoshop PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

7.8CVSS5.3AI score0.04528EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/03/18 4:51 p.m.10 views

python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the...

9.8CVSS7.4AI score0.0369EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/02/24 12:59 p.m.6 views

python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the...

9.8CVSS7.4AI score0.0369EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2020/02/24 12:00 a.m.38 views

Debian DSA-4631-1 : pillow - security update

Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrary code if malformed PCX, FLI, SGI or TIFF images are processed. C Tenable Network Security, Inc. The descriptive text and package checks i...

9.8CVSS6.6AI score0.04212EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2020/02/20 10:18 p.m.15 views

python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c

A flaw was discovered in python-pillow does where it does not properly restrict operations within the bounds of a memory buffer when decoding PCX images. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the...

9.8CVSS7.4AI score0.0369EPSS
SaveExploits0References4
Mageia
Mageia
added 2020/02/18 2:05 p.m.52 views

Updated python-pillow packages fix security vulnerabilities

Updated python-pillow packages fix security vulnerabilities: It was discovered that Pillow incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service CVE-2019-16865, CVE-2019-19911. It was discovered that Pillow incorrectly handled certain TIFF...

9.8CVSS2.8AI score0.04212EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/02/12 12:00 a.m.43 views

Adobe FrameMaker PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PC...

7.8CVSS5AI score0.0391EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/11 9:15 p.m.27 views

CVE-2020-6063

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

9.8CVSS9.3AI score0.03687EPSS
SaveExploits1References1
OSV
OSV
added 2020/02/11 9:15 p.m.7 views

CVE-2020-6063

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

8.8CVSS6.1AI score0.03687EPSS
SaveExploits1References1
OSV
OSV
added 2020/02/11 9:15 p.m.12 views

CVE-2020-6064

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

8.8CVSS7.6AI score0.03687EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2020/02/11 9:15 p.m.7 views

CVE-2020-6063

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

9.8CVSS9AI score0.03687EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2020/02/11 9:15 p.m.6 views

CVE-2020-6064

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

9.8CVSS9AI score0.03687EPSS
SaveExploits1References2
Prion
Prion
added 2020/02/11 9:15 p.m.21 views

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

6.8CVSS8.9AI score0.03687EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2020/02/11 9:15 p.m.18 views

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

6.8CVSS8.9AI score0.03687EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2020/02/11 8:50 p.m.75 views

CVE-2020-6064

CVE-2020-6064 affects Accusoft ImageGear 19.5.0 (igcore19d.dll). Talos and Red Hat disclosures describe an exploitable out-of-bounds write in uncompress_scan_line used to decompress PCX data, triggered by a malformed PCX file. The issue stems from insufficient sanity checks and buffer sizing: com...

9.8CVSS8.9AI score0.03687EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/02/11 8:50 p.m.34 views

CVE-2020-6064

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

9.8CVSS9AI score0.03687EPSS
SaveExploits1References1
Talos Blog
Talos Blog
added 2020/02/10 10:53 a.m.112 views

Vulnerability Spotlight: Accusoft ImageGear library code execution vulnerabilities

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered three code execution vulnerabilities in Accusoft ImageGear. The ImageGear library is a document-imaging developer toolkit to assist users with image conversion, creation, editing...

2.4AI score0.03687EPSS
SaveExploits7
Rows per page
Query Builder