Lucene search
K

27 matches found

OSV
OSV
added 2024/03/20 6:15 a.m.2 views

DEBIAN-CVE-2024-28580

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the ReadData function when reading images in RAS format...

8.4CVSS5.9AI score0.00056EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:45 a.m.1 views

SUSE CVE-2012-4202

Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via a crafted GIF...

9.3CVSS9.4AI score0.03493EPSS
Exploits0References6
OSV
OSV
added 2021/08/25 8:53 p.m.16 views

GHSA-7QCC-G2M9-8533 Null pointer deference in fltk

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon...

7.5CVSS8.2AI score0.00433EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:53 p.m.25 views

Null pointer deference in fltk

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon...

7.5CVSS2.5AI score0.00336EPSS
Exploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2021/05/18 1:56 p.m.24 views

Moderate: Red Hat Security Advisory: sane-backends security update

An update for sane-backends is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

5.5CVSS6.7AI score0.00117EPSS
Exploits1References3
AlmaLinux
AlmaLinux
added 2021/05/18 5:58 a.m.21 views

Moderate: sane-backends security update

Scanner Access Now Easy SANE is a universal scanner interface. The SANE application programming interface API provides standardized access to any raster image scanner hardware for example, flatbed scanners, hand-held scanners, video and still cameras, and frame-grabbers. Security Fixes:...

5.5CVSS6.1AI score0.00117EPSS
Exploits1References2
OSV
OSV
added 2021/03/12 9:15 a.m.9 views

CVE-2021-28307

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon...

7.5CVSS6.8AI score0.00433EPSS
Exploits0References1
Prion
Prion
added 2021/03/12 9:15 a.m.8 views

Null pointer dereference

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon...

5CVSS7.5AI score0.00336EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/03/12 8:15 a.m.61 views

CVE-2021-28307

CVE-2021-28307 affects the Rust crate fltk before version 0.15.3 . The issue is a NULL pointer dereference during attempted use of a non-raster image for a window icon. Multiple connected advisories (Red Hat, OSV, GHSA) reiterate this flaw; no patch/version remediation details are provided in the...

7.5CVSS8.2AI score0.00336EPSS
Exploits0References1Affected Software1
RustSec
RustSec
added 2021/03/06 12:0 p.m.18 views

Multiple memory safety issues

Affected versions contain multiple memory safety issues, such as: - Setting a multi label type where an image doesn't exist would lead to a NULL pointer dereference. - Setting a window icon using a non-raster image which FLTK rasterizes lazily would lead to a NULL dereference. - Pixmap constructo...

9.1CVSS1.4AI score0.00433EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2020/02/24 12:0 a.m.2 views

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-13500)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the PNG raster image parser in Accusoft ImageGear version 19.5.0. The vulnerability can be exploited by an attacker to execute code with the help of a specially...

9.8CVSS7.8AI score0.02248EPSS
Exploits1References1
Veracode
Veracode
added 2019/01/15 9:6 a.m.17 views

Integer Overflow

CUPS is vulnerable to integer overflow. The vulnerability is possible because it does not properly handle compressed raster image files, allowing the attacker to input a malicious file and trigger the cups filter to crash...

6.8CVSS6AI score0.05934EPSS
Exploits0References18Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/02/15 12:0 a.m.1 views

The vulnerability of the Flash Player software, caused by a full overflow of data, allows attackers to execute arbitrary code.

The vulnerability of the Flash Player software arises from a numerical overflow that occurs during the creation of raster images. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS8.1AI score0.11384EPSS
Exploits0References8Affected Software1
Fedora
Fedora
added 2017/09/19 3:27 a.m.43 views

[SECURITY] Fedora 26 Update: drawtiming-0.7.1-22.fc26

A command line tool for generating timing diagrams from ASCII input files. The input files use a structured language to represent signal state transitions and interdependencies. Raster image output support is provided by ImageMagick. It can be used for VHDL or verilog presentations...

9.8CVSS1.6AI score0.22748EPSS
Exploits14
Fedora
Fedora
added 2017/04/01 6:10 p.m.31 views

[SECURITY] Fedora 26 Update: sane-backends-1.0.25-7.fc26

Scanner Access Now Easy SANE is a universal scanner interface. The SANE application programming interface API provides standardized access to any raster image scanner hardware flatbed scanner, hand-held scanner, video and still cameras, frame-grabbers, etc...

7.5CVSS2.8AI score0.00441EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2014/06/10 1:7 p.m.2 views

OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

10CVSS6.8AI score0.07383EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2014/06/10 12:34 p.m.2 views

OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

10CVSS7AI score0.07383EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2014/05/15 6:19 p.m.2 views

OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

10CVSS6.8AI score0.07383EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2014/05/15 5:28 p.m.2 views

OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

10CVSS6.8AI score0.07383EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2014/05/13 7:47 p.m.4 views

OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

10CVSS6.8AI score0.07383EPSS
Exploits0References5
Rows per page
Query Builder