Lucene search
+L

1215 matches found

CNVD
CNVD
added 2020/03/18 12:0 a.m.10 views

Foxit Studio Photo Code Execution Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in the handling of PSD files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which stems from the program failing to properly initialize a pointe...

8.8CVSS7.2AI score0.11057EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/18 12:0 a.m.7 views

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18155)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of PSD files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which originates when a networked system or product perform...

4.3CVSS7.3AI score0.08158EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/16 10:46 p.m.77 views

GHSA-22JR-VC7J-G762 Potential buffer overflow in psd-tools

Impact An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malformed PSD input data during decoding to the PIL.Image or NumPy format, leading to a Buffer Overflow. Patches Users of psd-tools version v1.8.37 to v1.9.3 should upgrade to...

9.8CVSS9.7AI score0.01796EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2020/03/16 10:46 p.m.90 views

Potential buffer overflow in psd-tools

Impact An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malformed PSD input data during decoding to the PIL.Image or NumPy format, leading to a Buffer Overflow. Patches Users of psd-tools version v1.8.37 to v1.9.3 should upgrade to...

9.8CVSS9.3AI score0.01796EPSS
SaveExploits0References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2020/03/16 12:0 a.m.26 views

Foxit Studio Photo PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.2AI score0.08158EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/03/16 12:0 a.m.41 views

Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS3.7AI score0.11057EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/03/16 12:0 a.m.35 views

Foxit Studio Photo PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.2AI score0.08158EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/03/16 12:0 a.m.31 views

Foxit Studio Photo PSD File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS4.6AI score0.11057EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/14 6:15 p.m.45 views

CVE-2020-10571

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data...

9.8CVSS9.5AI score0.01796EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/14 6:15 p.m.22 views

CVE-2020-10571

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data...

9.8CVSS9.5AI score
SaveExploits0References2
Prion
Prion
added 2020/03/14 6:15 p.m.14 views

Design/Logic Flaw

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data...

7.5CVSS9.4AI score0.01796EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2020/03/14 6:15 p.m.9 views

PYSEC-2020-91

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data...

9.8CVSS7AI score0.01796EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/03/14 6:15 p.m.31 views

PYSEC-2020-91

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data...

9.8CVSS2.2AI score0.01796EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/03/14 5:23 p.m.46 views

CVE-2020-10571

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data...

9.5AI score0.01796EPSS
SaveExploits0References2
CVE
CVE
added 2020/03/14 5:23 p.m.155 views

CVE-2020-10571

The CVE-2020-10571 issue affects psd-tools prior to v1.9.4, where the Cython implementation of RLE decoding fails to validate input data. This can be triggered by malicious or malformed PSD input, with documented advisories describing a related buffer overflow scenario when the Cython path is use...

9.8CVSS9.4AI score0.01796EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2020/02/17 9:15 p.m.22 views

CVE-2014-1947

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...

7.8CVSS8.5AI score0.07024EPSS
SaveExploits5References7
OSV
OSV
added 2020/02/17 9:15 p.m.2 views

DEBIAN-CVE-2014-1947

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...

7.8CVSS8.7AI score0.07024EPSS
SaveExploits5References1
Prion
Prion
added 2020/02/17 9:15 p.m.31 views

Stack overflow

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...

6.8CVSS9AI score0.11055EPSS
SaveExploits5References7Affected Software4
UbuntuCve
UbuntuCve
added 2020/02/17 9:15 p.m.37 views

CVE-2014-1947

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...

7.8CVSS7.7AI score0.07024EPSS
SaveExploits5References1
Cvelist
Cvelist
added 2020/02/17 8:56 p.m.36 views

CVE-2014-1947

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...

8.6AI score0.07024EPSS
SaveExploits5References7
Rows per page
Query Builder