Lucene search
K

1071 matches found

NVD
NVD
added 2015/01/22 10:59 p.m.11 views

CVE-2014-7944

The sycc422torgb function in fxcodec/codec/fxcodecjpxopj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly handle odd values of image width, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

5CVSS6AI score0.01436EPSS
Exploits0References10
UbuntuCve
UbuntuCve
added 2015/01/22 10:59 p.m.27 views

CVE-2014-7944

The sycc422torgb function in fxcodec/codec/fxcodecjpxopj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly handle odd values of image width, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

5CVSS7.2AI score0.01436EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2015/01/22 10:0 p.m.22 views

CVE-2014-7944

Removed by vendor...

5CVSS9.4AI score0.01436EPSS
Exploits0
OSV
OSV
added 2015/01/18 6:59 p.m.1 views

DEBIAN-CVE-2015-0973

Buffer overflow in the pngreadIDATdata function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495...

8.8CVSS8.5AI score0.02006EPSS
Exploits2References1
OSV
OSV
added 2015/01/16 8:59 p.m.1 views

DEBIAN-CVE-2014-9603

The vmddecode function in libavcodec/vmdvideo.c in FFmpeg before 2.5.2 does not validate the relationship between a certain length value and the frame width, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...

7.5CVSS7.6AI score0.00908EPSS
Exploits0References1
NVD
NVD
added 2015/01/13 11:59 a.m.8 views

CVE-2014-10003

Multiple cross-site scripting XSS vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the width parameter to 1 uploader/admin/js/loadflv.js.php or 2 uploader/js/loadflv.js.php...

4.3CVSS5.8AI score0.00254EPSS
Exploits2References3
OSV
OSV
added 2014/08/29 4:55 p.m.3 views

DEBIAN-CVE-2014-5147

Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of service host crash via a crafted 32-bit process...

4.3CVSS6.1AI score0.00214EPSS
Exploits0References1
OSV
OSV
added 2014/08/29 4:55 p.m.2 views

UBUNTU-CVE-2014-5147

Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of service host crash via a crafted 32-bit process...

4.3CVSS5.8AI score0.00214EPSS
Exploits0References4
NVD
NVD
added 2014/07/02 6:55 p.m.11 views

CVE-2014-4543

Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...

4.3CVSS5.9AI score0.00174EPSS
Exploits1References2
NVD
NVD
added 2014/07/01 2:55 p.m.13 views

CVE-2014-4518

Cross-site scripting XSS vulnerability in xdresize.php in the Contact Form by ContactMe.com plugin 2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter...

4.3CVSS5.8AI score0.00174EPSS
Exploits1References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

Pargoon CMS all version - DoS Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Pargoon Vendor: http://www.vestasoft.ir Vulnerability Info: Type: DOS Risk: Medium 2010-01-17 - Found Vulnerability 2010-01-19 - Vendor notified 2010-05-08 - Public disclosure Vulnerability:...

7.1AI score
Exploits0
Debian CVE
Debian CVE
added 2014/05/08 2:0 p.m.31 views

CVE-2014-0190

Removed by vendor...

4.3CVSS7AI score0.01081EPSS
Exploits0
OSV
OSV
added 2014/05/08 12:0 a.m.0 views

UBUNTU-CVE-2014-0190

The GIF decoder in QtGui in Qt before 5.3 allows remote attackers to cause a denial of service NULL pointer dereference via invalid width and height values in a GIF image...

4.3CVSS6.8AI score0.01081EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2014/02/27 6:33 p.m.3 views

(gif2tiff): possible heap-based buffer overflow in readgifimage()

Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted height and width values in a GIF image...

6.8CVSS8AI score0.18712EPSS
Exploits0References4
NVD
NVD
added 2013/12/07 9:55 p.m.13 views

CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

9.3CVSS6.6AI score0.00938EPSS
Exploits0References3
OSV
OSV
added 2013/12/07 9:55 p.m.1 views

DEBIAN-CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

9.3CVSS6.7AI score0.00938EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2013/12/07 9:55 p.m.26 views

CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

9.3CVSS6AI score0.00938EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2013/12/07 9:0 p.m.25 views

CVE-2013-0849

The roqdecodeinit function in libavcodec/roqvideodec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted 1 width or 2 height dimension that is not a multiple of sixteen in id RoQ video data...

9.3CVSS6.5AI score0.00938EPSS
Exploits0
Cvelist
Cvelist
added 2013/09/10 7:0 p.m.17 views

CVE-2013-4243

Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted height and width values in a GIF image...

9.4AI score0.18712EPSS
Exploits0References8
OSV
OSV
added 2013/09/10 12:0 a.m.1 views

UBUNTU-CVE-2013-4243

Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted height and width values in a GIF image...

6.8CVSS7.9AI score0.18712EPSS
Exploits0References3
Rows per page
Query Builder