Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
image processing project image processing vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2009-2347
Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 up to and including 3.8.2, 3.9, and 4.0 allow context-dependent malicious users to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buff...
Libtiff Libtiff 3.8.0
Libtiff Libtiff 3.8.1
Libtiff Libtiff 3.9
Libtiff Libtiff 4.0
Libtiff Libtiff 3.8.2
NA
CVE-2009-2285
Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent malicious users to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.
Libtiff Libtiff 3.8.2
2 EDB exploits
NA
CVE-2009-2042
libpng prior to 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote malicious users to read portions of sensitive memory via &q...
Libpng Libpng 0.89c
Libpng Libpng 1.0.11
Libpng Libpng 1.0.13
Libpng Libpng 1.0.15
Libpng Libpng 1.0.16
Libpng Libpng 1.0.2
Libpng Libpng 1.0.22
Libpng Libpng 1.2.18
Libpng Libpng 1.2.1
Libpng Libpng 1.2.17
Libpng Libpng 1.2.16
Libpng Libpng 1.2.13
Libpng Libpng 1.2.19
Libpng Libpng 1.2.10
Libpng Libpng 1.0.8
Libpng Libpng 1.0.9
Libpng Libpng 1.2.14
Libpng Libpng 1.2.15
Libpng Libpng 1.2.11
Libpng Libpng 1.2.23
Libpng Libpng 1.2.24
Libpng Libpng 1.2.22
NA
CVE-2009-1882
Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow. NOTE: some...
Imagemagick Imagemagick 6.5.2-8
NA
CVE-2008-6621
Unspecified vulnerability in GraphicsMagick prior to 1.2.3 allows remote malicious users to cause a denial of service (crash) via unspecified vectors in DPX images. NOTE: some of these details are obtained from third party information.
Graphicsmagick Graphicsmagick 1.0.4
Graphicsmagick Graphicsmagick 1.0.1
Graphicsmagick Graphicsmagick 1.1.1
Graphicsmagick Graphicsmagick 1.1.14
Graphicsmagick Graphicsmagick
Graphicsmagick Graphicsmagick 1.0.5
Graphicsmagick Graphicsmagick 1.1
Graphicsmagick Graphicsmagick 1.1.13
Graphicsmagick Graphicsmagick 1.1.5
Graphicsmagick Graphicsmagick 1.2
Graphicsmagick Graphicsmagick 1.1.9
Graphicsmagick Graphicsmagick 1.1.8
Graphicsmagick Graphicsmagick 1.1.4
Graphicsmagick Graphicsmagick 1.1.2
Graphicsmagick Graphicsmagick 1.1.7
Graphicsmagick Graphicsmagick 1.0.6
Graphicsmagick Graphicsmagick 1.0
Graphicsmagick Graphicsmagick 1.1.10
Graphicsmagick Graphicsmagick 1.1.11
Graphicsmagick Graphicsmagick 1.1.6
Graphicsmagick Graphicsmagick 1.2.2
Graphicsmagick Graphicsmagick 1.0.2
NA
CVE-2009-0839
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote malicious users to execute arbitrary code via a crafted id parameter in a query action.
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.2.0
Umn Mapserver 4.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 5.2.1
NA
CVE-2009-0840
Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 allows remote malicious users to have an unknown impact via a negative value in the Content-Length HTTP header.
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 4.8.0
Umn Mapserver 4.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 5.2.1
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.10.1
NA
CVE-2009-0841
Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2, when running on Windows with Cygwin, allows remote malicious users to create arbitrary files via a .. (dot dot) in the id parameter.
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.6.0
Umn Mapserver 4.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 4.2.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 5.2.1
NA
CVE-2009-0842
mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 allows remote malicious users to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekr...
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.6.0
Osgeo Mapserver 4.4.0
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 4.2.0
Umn Mapserver 4.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.3
Osgeo Mapserver 5.2.1
NA
CVE-2009-0843
The msLoadQuery function in mapserv in MapServer 4.x prior to 4.10.4 and 5.x prior to 5.2.2 allows remote malicious users to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether thi...
Osgeo Mapserver 4.10.0
Osgeo Mapserver 4.8.0
Osgeo Mapserver 4.6.0
Umn Mapserver 4.0
Osgeo Mapserver 4.10.2
Osgeo Mapserver 4.10.3
Osgeo Mapserver 4.4.0
Osgeo Mapserver 5.2.1
Osgeo Mapserver 5.2.0
Osgeo Mapserver 5.0.0
Osgeo Mapserver 4.10.1
Osgeo Mapserver 4.2.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-36920
buffer overflow
CVE-2024-36913
CVE-2024-5497
CVE-2024-23917
CVE-2024-4956
server-side request forgery
CVE-2024-35468
SSTI
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »