Lucene search
+L

92 matches found

Github Security Blog
Github Security Blog
added 2023/09/05 6:30 a.m.22 views

Index out of bounds leading to crash

ZPLGFA 1.1.1 allows attackers to cause a panic because of an integer index out of range during a ConvertToGraphicField call via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence...

5.5CVSS7.1AI score0.00242EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/09/05 5:15 a.m.6 views

CVE-2023-36307

ZPLGFA 1.1.1 allows attackers to cause a panic because of an integer index out of range during a ConvertToGraphicField call via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence...

5.5CVSS6.1AI score0.00242EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/09/05 12:0 a.m.4 views

ZPLGFA Input Validation Error Vulnerability

ZPLGFA is a Go package from Simon Waldherr's personal developer. It is used to convert PNG, JPEG and GIF encoded graphic files into ZPL compatible ^GF elements graphic fields. A security vulnerability exists in ZPLGFA version 1.1.1, which stems from allowing an attacker to cause a panic with a...

5.5CVSS6.8AI score0.00242EPSS
SaveExploits1References1
OSV
OSV
added 2023/09/05 12:0 a.m.10 views

CVE-2023-36307

ZPLGFA 1.1.1 allows attackers to cause a panic because of an integer index out of range during a ConvertToGraphicField call via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence...

5.5AI score
SaveExploits0References3
CVE
CVE
added 2023/09/05 12:0 a.m.42 views

CVE-2023-36307

CVE-2023-36307 affects ZPLGFA 1.1.1. The root cause is an integer index out of range in ConvertToGraphicField when processing a zero-width image, causing a panic/crash. The description notes unclear security consequences in typical use. Remediation hints from PT-2023-25522 suggest avoiding zero-w...

5.5CVSS5.4AI score0.00242EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/04 12:0 a.m.8 views

PT-2023-25522 · Zplgfa · Zplgfa

Name of the Vulnerable Software and Affected Versions: ZPLGFA version 1.1.1 Description: The issue allows attackers to cause a panic due to an integer index out of range during a ConvertToGraphicField call via an image of zero width. It is unclear whether there are common use cases in which this...

5.5CVSS7AI score0.00242EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
added 2023/02/15 6:17 a.m.7 views

SUSE CVE-2005-2702

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner" characters...

7.5CVSS7.7AI score0.03616EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.7 views

SUSE CVE-2007-0243

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

6.8CVSS7.5AI score0.10994EPSS
SaveExploits2References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.5 views

SUSE CVE-2021-4216

A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...

5.5CVSS5.6AI score0.00234EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:22 a.m.7 views

SUSE CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

5.5CVSS5.5AI score0.01247EPSS
SaveExploits0References7
OSV
OSV
added 2023/02/06 11:15 p.m.7 views

ALPINE-CVE-2022-44617

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

7.5CVSS6.5AI score0.01247EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/01/25 12:0 a.m.9 views

The vulnerability of the ParsePixels() function in the library for working with XPixmap (XPM) libXpm allows a attacker to cause a service failure.

The vulnerability of the ParsePixels function in the library for working with XPixmap XPM files, libXpm, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures by using a specially created XPM file with a width set to 0...

7.8CVSS6.6AI score0.01247EPSS
SaveExploits0References13Affected Software8
RedHat Linux
RedHat Linux
added 2023/01/23 6:2 p.m.8 views

libXpm: Runaway loop on width of 0 and enormous height

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

7.5CVSS6AI score0.01247EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/01/23 5:56 p.m.18 views

libXpm: Runaway loop on width of 0 and enormous height

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

7.5CVSS6AI score0.01247EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/01/23 5:55 p.m.9 views

libXpm: Runaway loop on width of 0 and enormous height

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an infinite loop, resulting in a Denial of Service in the application linked to the library...

7.5CVSS6AI score0.01247EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/08/26 4:15 p.m.7 views

CVE-2021-4216

A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...

5.5CVSS6.2AI score0.00234EPSS
SaveExploits0References3
OSV
OSV
added 2022/08/26 4:15 p.m.5 views

DEBIAN-CVE-2021-4216

A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...

5.5CVSS6.6AI score0.00234EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/26 4:15 p.m.9 views

UBUNTU-CVE-2021-4216

A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...

5.5CVSS6.3AI score0.00234EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/08/26 3:25 p.m.81 views

CVE-2021-4216

A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream...

5.5CVSS5.3AI score0.00234EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/08/26 12:0 a.m.15 views

PT-2022-11547 · Mupdf +2 · Mupdf +2

Name of the Vulnerable Software and Affected Versions: Mupdf versions prior to 1.20.0-rc1 Description: A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. Recommendations: For versions prior to 1.20.0-rc1, update to Mupdf-1.20.0-rc1 or later to...

7.8CVSS6.4AI score0.51733EPSS
SaveExploits2References27
Rows per page
Query Builder