Lucene search
+L

992 matches found

Vulnrichment
Vulnrichment
added 2024/11/22 8:50 p.m.18 views

CVE-2024-11518 IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.5AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/22 8:50 p.m.27 views

CVE-2024-11518 IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.00436EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/22 8:50 p.m.57 views

CVE-2024-11518

CVE-2024-11518 affects IrfanView and relates to an RLE file parsing flaw that allows heap-based buffer overflow and remote code execution. The issue stems from insufficient validation of the length of user-supplied data before copying to a fixed-length heap buffer, enabling an attacker to execute...

7.8CVSS8AI score0.00436EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/11/22 8:50 p.m.59 views

CVE-2024-11519

The CVE-2024-11519 entry describes a memory corruption in IrfanView triggered by parsing RLE files. The flaw stems from insufficient validation of user-supplied data in RLE parsing, enabling an attacker to execute code in the context of the current process. The vulnerability is labeled as HIGH se...

7.8CVSS8.1AI score0.00425EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 8:50 p.m.16 views

CVE-2024-11519 IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

7.8CVSS8.1AI score0.00425EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/22 8:50 p.m.27 views

CVE-2024-11519 IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

7.8CVSS0.00425EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/22 8:15 p.m.13 views

CVE-2024-6815

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS7.5AI score0.00577EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/22 8:15 p.m.29 views

CVE-2024-6815

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS0.00577EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/22 8:05 p.m.56 views

CVE-2024-6815

The CVE-2024-6815 issue affects IrfanView’s RLE file parsing, where an out-of-bounds write arises from inadequate validation of input data. This could allow remote code execution with user interaction (malicious page/file) and is triggered during RLE parsing. The vulnerability is described across...

7.8CVSS8AI score0.00577EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 8:05 p.m.17 views

CVE-2024-6815 IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS8.1AI score0.00577EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/22 8:05 p.m.33 views

CVE-2024-6815 IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...

7.8CVSS0.00577EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/21 12:00 a.m.20 views

IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RLE files...

7.8CVSS6.8AI score0.00436EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/11/21 12:00 a.m.15 views

IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RLE files...

7.8CVSS7AI score0.00425EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/11/12 9:36 a.m.11 views

freerdp: OutOfBound Read in planar_skip_plane_rle

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, use /gfx or /rfx modes on by default, require server side...

9.8CVSS5.8AI score0.01941EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2024/09/10 12:00 a.m.22 views

NewStart CGSL MAIN 6.02 : libtiff Multiple Vulnerabilities (NS-SA-2024-0051)

The remote NewStart CGSL host, running version MAIN 6.02, has libtiff packages installed that are affected by multiple vulnerabilities: - Buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly...

9.3CVSS7.7AI score0.1496EPSS
SaveExploits24References93
Zero Day Initiative
Zero Day Initiative
added 2024/07/26 12:00 a.m.12 views

IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RLE files...

7.8CVSS6.9AI score0.00577EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/07/26 12:00 a.m.12 views

PT-2024-37880 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

7.8CVSS7.3AI score0.00577EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/07/09 7:18 p.m.36 views

CVE-2024-20783 Adobe Indesign 2024 RLE File Parsing Heap Memory Corruption

InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00361EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/09 7:18 p.m.20 views

CVE-2024-20783 Adobe Indesign 2024 RLE File Parsing Heap Memory Corruption

InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.6AI score0.00361EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.23 views

Fedora: Security Advisory for gdcm (FEDORA-2024-7a57842ec3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.01474EPSS
SaveExploits3References2
Rows per page
Query Builder