Lucene search
+L

544 matches found

Prion
Prion
added 2017/10/11 6:29 p.m.22 views

Stack overflow

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

6.8CVSS8.8AI score0.02656EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
added 2017/10/11 6:00 p.m.39 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.8AI score0.02656EPSS
SaveExploits1References4
CVE
CVE
added 2017/10/11 6:00 p.m.103 views

CVE-2017-2887

CVE-2017-2887 affects SDL_image 2.0.1, with a stack-based buffer overflow in the XCF property handling. A specially crafted XCF file can overflow a stack buffer, potentially enabling code execution. The vulnerability is exploitable via crafted XCF input and does not specify a required user intera...

8.8CVSS8.7AI score0.02656EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2017/10/11 6:00 p.m.50 views

CVE-2017-2887

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this...

8.8CVSS8.9AI score0.02656EPSS
SaveExploits1
Talos
Talos
added 2017/10/10 12:00 a.m.42 views

Simple DirectMedia Layer SDL_image XCF Property Handling Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDLimage 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger thi...

8.8CVSS8.8AI score0.02656EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2017/09/13 12:48 p.m.25 views

CVE-2017-14343

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

6.5CVSS4.1AI score0.01388EPSS
SaveExploits1References1
Veracode
Veracode
added 2017/09/13 5:51 a.m.23 views

Denial Of Service (DoS) Through Memory Leak

ImageMagick is vulnerable to denial of service DoS attacks through a memory leak. Using a .xcf file, attackers can trigger a memory leak through the ReadXCFImage function of coders/xcf.c...

6.5CVSS6.8AI score0.01388EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2017/09/13 12:00 a.m.10 views

ImageMagick ReadXCFImage function memory leak vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in the 'ReadXCFImage' function in the coders/xcf.c file in ImageMagick version 7.0.6-6. An attacker can exploit this vulnerability t...

6.5CVSS6.8AI score0.01388EPSS
SaveExploits1References1
NVD
NVD
added 2017/09/12 5:29 p.m.29 views

CVE-2017-14343

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

6.5CVSS6.3AI score0.01388EPSS
SaveExploits1References2
Prion
Prion
added 2017/09/12 5:29 p.m.20 views

Memory corruption

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

4.3CVSS6.3AI score0.01388EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2017/09/12 5:29 p.m.31 views

CVE-2017-14343

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

6.5CVSS6.4AI score
SaveExploits0References2
Debian CVE
Debian CVE
added 2017/09/12 5:00 p.m.70 views

CVE-2017-14343

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

6.5CVSS7.2AI score0.01388EPSS
SaveExploits1
Cvelist
Cvelist
added 2017/09/12 5:00 p.m.39 views

CVE-2017-14343

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

6.3AI score0.01388EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2017/09/12 12:00 a.m.31 views

CVE-2017-14343

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

6.5CVSS6.8AI score0.01388EPSS
SaveExploits1References2
OSV
OSV
added 2017/09/12 12:00 a.m.8 views

UBUNTU-CVE-2017-14343

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file...

6.5CVSS6.8AI score0.01388EPSS
SaveExploits1References3
CNVD
CNVD
added 2017/09/02 12:00 a.m.11 views

ImageMagick Denial of Service Vulnerability (CNVD-2017-24368)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in ReadOneLayer in coders/xcf.c in ImageMagick version 7.0.6-6, which can be...

7.1CVSS6.8AI score0.01913EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/01 9:29 p.m.7 views

DEBIAN-CVE-2017-12691

The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted file...

6.5CVSS6.5AI score0.01913EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/01 12:00 a.m.19 views

UBUNTU-CVE-2017-12691

The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted file...

6.5CVSS7AI score0.01913EPSS
SaveExploits0References3
Veracode
Veracode
added 2017/08/24 5:27 a.m.35 views

Denial-of-Service (DoS) Through Memory Exhaustion

ImageMagick is vulnerable to denial of service DoS attacks through memory exhaustion. The loadlevel function in coders/xcf.c does not validate offsets, allowing a malicious user to pass a xcf file to allocate over the memory limit and consume all the application's memory...

6.5CVSS7.2AI score0.01632EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2017/08/24 12:00 a.m.7 views

ImageMagick Denial of Service Vulnerability (CNVD-2017-25062)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial of service vulnerability exists in the 'loadlevel' function of the ImageMagick coders/xcf.c file, which allows remote attackers to exploit the vulnerability to construct malicious...

7.1CVSS6.8AI score0.01632EPSS
SaveExploits0References1
Rows per page
Query Builder