Lucene search
+L

599 matches found

OSV
OSV
added 2019/07/31 5:15 p.m.4 views

UBUNTU-CVE-2019-5060

An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer. This buffer can then be written out of bounds, resulting in a heap...

8.8CVSS6.4AI score0.04043EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2019/07/31 4:51 p.m.43 views

CVE-2019-5060

An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer. This buffer can then be written out of bounds, resulting in a heap...

8.8CVSS9.1AI score0.04043EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2019/07/31 4:50 p.m.43 views

CVE-2019-5059

An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then be written out of bounds resulting in a heap overflow, ultimately...

8.8CVSS8.9AI score0.03616EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/07/31 4:50 p.m.34 views

CVE-2019-5059

An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then be written out of bounds resulting in a heap overflow, ultimately...

8.8CVSS8.8AI score0.03616EPSS
SaveExploits0References5
CVE
CVE
added 2019/07/31 4:50 p.m.183 views

CVE-2019-5059

CVE-2019-5059 describes an exploitable code execution in SDL2_image 2.0.4 via XPM image rendering caused by an integer overflow that allocates too small a heap buffer and allows out-of-bounds writes. Connected advisories (Mageia/OpenSUSE OSV) document that SDL2_image 2.0.4 is the affected version...

8.8CVSS8.7AI score0.03616EPSS
SaveExploits0References5Affected Software1
Talos
Talos
added 2019/07/29 12:0 a.m.130 views

SDL_image XPM image colorhash parsing Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer. This buffer can then be written out of bounds, resulting in a...

8.8CVSS8.9AI score0.04043EPSS
SaveExploits1
Talos
Talos
added 2019/07/29 12:0 a.m.120 views

SDL_image XPM image color code code execution vulnerability

Summary An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then be written out of bounds resulting in a heap overflow,...

8.8CVSS8.8AI score0.03616EPSS
SaveExploits0
Veracode
Veracode
added 2019/05/02 4:40 a.m.24 views

Denial Of Service (DoS) Or Remote Code Execution (RCE)

The netpbm packages contain a library of functions which support programs for handling various graphics file formats, including .pbm Portable Bit Map, .pgm Portable Gray Map, .pnm Portable Any Map, .ppm Portable Pixel Map, and others. Two heap-based buffer overflow flaws were found in the embedde...

7.5CVSS5.6AI score0.10618EPSS
SaveExploits0References21Affected Software1
Veracode
Veracode
added 2019/01/15 9:2 a.m.28 views

Denial Of Service (DoS)

php is vulnerable to denial of service DoS attacks. The vulnerability exists as the gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted color table i...

4.3CVSS7.7AI score0.22319EPSS
SaveExploits3References23Affected Software4
Veracode
Veracode
added 2019/01/15 8:50 a.m.31 views

Remote Code Execution (RCE)

netpbm is vulnerable to remote code execution RCE attacks. The vulnerability exists through a stack-based buffer overflow flaw where an attacker could create a malicious XPM file that would cause xpmtoppm to crash or, potentially, execute arbitrary code with the privileges of the user running...

7.5CVSS7.7AI score0.04223EPSS
SaveExploits0References18Affected Software1
ossfuzz
ossfuzz
added 2018/12/01 12:14 a.m.12 views

graphicsmagick/coder_XPM_fuzzer: Use-of-uninitialized-value in QueryColorname

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5724087586914304 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXPMfuzzer Fuzz target binary: coderXPMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2018/04/27 11:14 a.m.20 views

graphicsmagick/coder_XPM_fuzzer: Use-of-uninitialized-value in StringToListMod

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4901535598247936 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXPMfuzzer Fuzz target binary: coderXPMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2018/02/27 8:20 p.m.21 views

graphicsmagick/coder_XPM_fuzzer: Use-of-uninitialized-value in IsMonochromeImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4799209178923008 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXPMfuzzer Fuzz target binary: coderXPMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

6.7AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2017/12/27 8:50 p.m.29 views

CVE-2017-17882

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file...

6.5CVSS4.6AI score0.01254EPSS
SaveExploits0References1
NVD
NVD
added 2017/12/27 5:8 p.m.28 views

CVE-2017-17882

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file...

6.5CVSS6.8AI score0.01254EPSS
SaveExploits0References2
OSV
OSV
added 2017/12/27 5:8 p.m.30 views

CVE-2017-17882

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file...

6.5CVSS6.3AI score
SaveExploits0References2
OSV
OSV
added 2017/12/27 5:8 p.m.1 views

DEBIAN-CVE-2017-17882

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file...

6.5CVSS6.8AI score0.01254EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2017/12/27 5:8 p.m.2 views

CVE-2017-17882

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file...

6.5CVSS5.4AI score0.01254EPSS
SaveExploits0References4
Prion
Prion
added 2017/12/27 5:8 p.m.24 views

Memory corruption

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file...

4.3CVSS6AI score0.01254EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2017/12/27 12:0 a.m.5 views

UBUNTU-CVE-2017-17882

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file...

6.5CVSS6.8AI score0.01254EPSS
SaveExploits0References3
Rows per page
Query Builder