Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-24294
HistoryAug 22, 2023 - 12:00 a.m.

CVE-2020-24294

2023-08-2200:00:00
ubuntu.com
ubuntu.com
7
cve-2020-24294
buffer overflow
psdparser
freeimage
denial of service
crafted psd file
unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

48.8%

Buffer Overflow vulnerability in psdParser::UnpackRLE function in
PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase
a denial of service via opening of crafted psd file.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

48.8%

Related for UB:CVE-2020-24294