Lucene search
+L

541 matches found

Talos
Talos
added 2018/03/01 12:0 a.m.69 views

Simple DirectMedia Layer SDL2_image do_layer_surface Double-Free Vulnerability

Summary A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability. Tested Versions Simple DirectMedia Lay...

8.8CVSS8.3AI score0.01677EPSS
SaveExploits0
OSV
OSV
added 2017/12/20 9:29 a.m.4 views

DEBIAN-CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

5.5CVSS7.2AI score0.01127EPSS
SaveExploits0References1
Prion
Prion
added 2017/12/20 9:29 a.m.23 views

Stack overflow

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

4.3CVSS5.9AI score0.01127EPSS
SaveExploits0References5Affected Software3
ATTACKERKB
ATTACKERKB
added 2017/12/20 9:29 a.m.5 views

CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

5.5CVSS6.4AI score0.01127EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2017/12/20 9:0 a.m.39 views

CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

6.3AI score0.01127EPSS
SaveExploits0References5
CNVD
CNVD
added 2017/12/20 12:0 a.m.7 views

GIMP xcf_load_stream Stack Buffer Overflow Vulnerability

GIMP GNU Image Manipulation Program, GNU Image Manipulation Program is a cross-platform open source image processing software developed by the GIMP team. The software enables a variety of image processing, including photo retouching, image compositing and image creation. A stack buffer overflow...

5.5CVSS7.2AI score0.01127EPSS
SaveExploits0References1
OSV
OSV
added 2017/12/20 12:0 a.m.6 views

UBUNTU-CVE-2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no '\0' character after the version string...

5.5CVSS6.6AI score0.01127EPSS
SaveExploits0References6
Veracode
Veracode
added 2017/12/13 5:24 a.m.17 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a XCF file to the application to cause a out-of-bounds read that can crash the application...

6.5CVSS6.5AI score0.02991EPSS
SaveExploits0References8Affected Software1
seebug.org
seebug.org
added 2017/11/06 12:0 a.m.32 views

Simple DirectMedia Layer SDL_image XCF Property Handling Code Execution Vulnerability(CVE-2017-2887)

Summary An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger thi...

6.8CVSS9AI score0.02656EPSS
SaveExploits1
Mageia
Mageia
added 2017/11/02 9:47 p.m.36 views

Updated sdl2_image & mingw packages fix security vulnerability

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS4.2AI score0.02656EPSS
SaveExploits1References2
CNVD
CNVD
added 2017/10/16 12:0 a.m.51 views

SDL_image Buffer Overflow Vulnerability

SDLImage is an open source library of functions for working with graphics files. A buffer overflow vulnerability exists in the XCF attribute handling function in SDLimage version 2.0.1. An attacker can exploit this vulnerability to execute code with the help of a specially crafted xcf file...

8.8CVSS8.9AI score0.02656EPSS
SaveExploits1References1
NVD
NVD
added 2017/10/11 6:29 p.m.12 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.8AI score0.02656EPSS
SaveExploits1References4
OSV
OSV
added 2017/10/11 6:29 p.m.18 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.9AI score
SaveExploits0References4
OSV
OSV
added 2017/10/11 6:29 p.m.4 views

DEBIAN-CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8AI score0.02656EPSS
SaveExploits1References1
OSV
OSV
added 2017/10/11 6:29 p.m.8 views

ALPINE-CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8AI score0.02656EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2017/10/11 6:29 p.m.23 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS7.5AI score0.02656EPSS
SaveExploits1References3
OSV
OSV
added 2017/10/11 6:29 p.m.10 views

UBUNTU-CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS7.6AI score0.02656EPSS
SaveExploits1References4
Prion
Prion
added 2017/10/11 6:29 p.m.18 views

Stack overflow

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

6.8CVSS8.8AI score0.02656EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
added 2017/10/11 6:0 p.m.30 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.8AI score0.02656EPSS
SaveExploits1References4
CVE
CVE
added 2017/10/11 6:0 p.m.98 views

CVE-2017-2887

CVE-2017-2887 affects SDL_image 2.0.1, with a stack-based buffer overflow in the XCF property handling. A specially crafted XCF file can overflow a stack buffer, potentially enabling code execution. The vulnerability is exploitable via crafted XCF input and does not specify a required user intera...

8.8CVSS8.7AI score0.02656EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder