Lucene search
+L

264 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 4:40 a.m.•12 views

SUSE CVE-2017-13034

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

5.3CVSS7.5AI score0.03241EPSS
SaveExploits0References8
NVD
NVD
•added 2023/01/26 6:59 p.m.•32 views

CVE-2022-42410

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.0036EPSS
SaveExploits0References2
OSV
OSV
•added 2023/01/26 6:59 p.m.•16 views

CVE-2022-42410

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.2AI score0.0036EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/26 6:59 p.m.•37 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

4.4CVSS7.8AI score0.0036EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/26 12:00 a.m.•4 views

CVE-2022-42410: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.6AI score0.0036EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/01/26 12:00 a.m.•13 views

CVE-2022-42410

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.0036EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/26 12:00 a.m.•39 views

CVE-2022-42410

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS8AI score0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•18 views

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in PDF-XChange Editor that originates from a problem with the parsing of certain PGM files...

7.8CVSS7.2AI score0.0036EPSS
SaveExploits0References3
CVE
CVE
•added 2023/01/26 12:00 a.m.•78 views

CVE-2022-42410

CVE-2022-42410 affects PDF-XChange Editor. The flaw is an out-of-bounds write in parsing of PGM files, enabling remote code execution when a user opens a crafted PGM file or visits a malicious page. Requires user interaction; attack vector is local (per CVSS context) but remote code execution in ...

7.8CVSS7.8AI score0.0036EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2022/10/07 12:00 a.m.•26 views

PDF-XChange Editor PGM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS4.8AI score0.0036EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/10/07 12:00 a.m.•17 views

PT-2022-26412 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.4AI score0.0036EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/09/14 12:00 a.m.•22 views

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2022-2296)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.01051EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2022/06/29 7:00 a.m.•6 views

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.

...

5.5CVSS6.6AI score0.01051EPSS
SaveExploits0
OSV
OSV
•added 2022/06/18 4:15 p.m.•11 views

UBUNTU-CVE-2021-46822

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...

5.5CVSS7AI score0.01051EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/01/22 12:00 a.m.•46 views

openSUSE 15 Security Update : stb (openSUSE-SU-2022:0018-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0018-1 advisory. - An issue was discovered in stb stbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading ...

7.1CVSS7.5AI score0.01456EPSS
SaveExploits1References4
OSV
OSV
•added 2021/12/10 10:19 p.m.•13 views

MGASA-2021-0549 Updated curaengine packages fix security vulnerability

Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...

7.8CVSS6.4AI score0.01456EPSS
SaveExploits2References3
OSV
OSV
•added 2021/10/21 7:15 p.m.•22 views

CVE-2021-42716

An issue was discovered in stb stbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stbimage, or...

7.1CVSS7.7AI score
SaveExploits0References12
Debian CVE
Debian CVE
•added 2021/10/21 6:36 p.m.•74 views

CVE-2021-42716

An issue was discovered in stb stbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stbimage, or...

7.1CVSS7.1AI score0.01456EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/10/21 6:36 p.m.•50 views

CVE-2021-42716

An issue was discovered in stb stbimage.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stbimage, or...

7.5AI score0.01456EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2021/04/26 12:00 a.m.•12 views

PT-2022-12933

Name of the Vulnerable Software and Affected Versions libjpeg-turbo versions 2.0.90 and earlier Description The issue is related to a heap-based buffer overflow in the get word rgb row function in rdppm.c, which occurs when using tjLoadImage to load a 16-bit binary PPM file into a grayscale buffe...

5.5CVSS6.7AI score0.01051EPSS
SaveExploits0References32
Rows per page
Query Builder