Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
canon vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2013-5357
Integer overflow in Picasa3.exe in Google Picasa prior to 3.9.0 Build 137.69 allows remote malicious users to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag.
Google Picasa 3.9.0
7.5
CVSSv2
CVE-2013-5349
Integer underflow in Picasa3.exe in Google Picasa prior to 3.9.0 Build 137.69 allows remote malicious users to execute arbitrary code via a crafted JPEG tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a large JPEG tag value and a sm...
Google Picasa 3.9.0
9.3
CVSSv2
CVE-2018-0649
Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones)) allows an m...
Eset Internet Security -
Eset Smart Security -
Eset Nod32 Antivirus -
Eset Deslock\\+ Pro -
Eset Smart Security Premium -
Eset Compusec -
4.3
CVSSv2
CVE-2019-17402
Exiv2 0.27.2 allows malicious users to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size.
Exiv2 Exiv2 0.27.2
Debian Debian Linux 8.0
Debian Debian Linux 10.0
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 19.04
Canonical Ubuntu Linux 19.10
Canonical Ubuntu Linux 16.04
5
CVSSv2
CVE-2020-13114
An issue exists in libexif prior to 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
Libexif Project Libexif
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 14.04
Canonical Ubuntu Linux 19.10
Canonical Ubuntu Linux 20.04
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 12.04
Opensuse Leap 15.1
2.1
CVSSv2
CVE-2020-12767
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
Libexif Project Libexif 0.6.21
Debian Debian Linux 8.0
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 14.04
Canonical Ubuntu Linux 19.10
Canonical Ubuntu Linux 20.04
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 12.04
Opensuse Leap 15.1
1.9
CVSSv2
CVE-2020-0093
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
Google Android 8.0
Google Android 8.1
Google Android 9.0
Google Android 10.0
Debian Debian Linux 8.0
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 14.04
Canonical Ubuntu Linux 19.10
Canonical Ubuntu Linux 20.04
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 12.04
Libexif Project Libexif
Opensuse Leap 15.1
1 Article
6.4
CVSSv2
CVE-2020-13113
An issue exists in libexif prior to 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
Libexif Project Libexif
Debian Debian Linux 8.0
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 14.04
Canonical Ubuntu Linux 19.10
Canonical Ubuntu Linux 20.04
Canonical Ubuntu Linux 16.04
Canonical Ubuntu Linux 12.04
Opensuse Leap 15.1
6.4
CVSSv2
CVE-2020-0182
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Google Android 10.0
Debian Debian Linux 8.0
7.5
CVSSv2
CVE-2013-2156
Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) prior to 1.7.1 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitr...
Apache Xml Security For C\\+\\+ 1.6.0
Apache Xml Security For C\\+\\+ 1.1.0
Apache Xml Security For C\\+\\+ 1.6.1
Apache Xml Security For C\\+\\+ 1.2.1
Apache Xml Security For C\\+\\+ 1.5.1
Apache Xml Security For C\\+\\+ 1.5.0
Apache Xml Security For C\\+\\+ 0.2.0
Apache Xml Security For C\\+\\+ 1.3.0
Apache Xml Security For C\\+\\+
Apache Xml Security For C\\+\\+ 1.4.0
Apache Xml Security For C\\+\\+ 1.3.1
Apache Xml Security For C\\+\\+ 1.2.0
Apache Xml Security For C\\+\\+ 0.1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
NEXT »