Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

hans jerry illikainen vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2015-7801
Use-after-free vulnerability in OptiPNG 0.6.4 allows remote malicious users to execute arbitrary code via a crafted PNG file.
Optipng Project OptipngCanonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 12.04
7.8
CVSSv3
CVE-2016-3981
Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG prior to 0.7.6 allows remote malicious users to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file.
Optipng Project OptipngCanonical Ubuntu Linux 12.04Debian Debian Linux 8.0Debian Debian Linux 7.0Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04
8.8
CVSSv3
CVE-2017-17670
In VideoLAN VLC media player up to and including 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in the MP4 demux module leading to a invalid free, because the type of a box may be changed between a read operation and a free operation.
Videolan Vlc Media PlayerDebian Debian Linux 9.0
8.8
CVSSv3
CVE-2016-3982
Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG prior to 0.7.6 allows remote malicious users to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file, which triggers a heap-bas...
Opensuse Leap 42.1Opensuse Opensuse 13.2Debian Debian Linux 7.0Debian Debian Linux 8.0Optipng Project OptipngCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.10
6.5
CVSSv3
CVE-2016-2191
The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG prior to 0.7.6 allows remote malicious users to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.
Optipng Optipng 0.7.2Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Debian Debian Linux 7.0Debian Debian Linux 8.0Opensuse Leap 42.1Opensuse Opensuse 13.2
9.8
CVSSv3
CVE-2016-3078
Multiple integer overflows in php_zip.c in the zip extension in PHP prior to 7.0.6 allow remote malicious users to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) ...
Php Php
8.8
CVSSv3
CVE-2016-1960
Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox prior to 45.0 and Firefox ESR 38.x prior to 38.7 allows remote malicious users to execute arbitrary code or cause a denial of service (use-after-free) by leveraging mishandling of end ...
Oracle Linux 5.0Oracle Linux 6Oracle Linux 7Mozilla Firefox Esr 38.3.0Mozilla Firefox Esr 38.2.1Mozilla Firefox Esr 38.2.0Mozilla ThunderbirdMozilla Firefox Esr 38.6.0Mozilla Firefox Esr 38.5.1Mozilla Firefox Esr 38.0.5Mozilla Firefox Esr 38.0.1Mozilla Firefox Esr 38.5.0Mozilla Firefox Esr 38.4.0Mozilla Firefox Esr 38.0Mozilla FirefoxMozilla Firefox Esr 38.6.1Mozilla Firefox Esr 38.1.1Mozilla Firefox Esr 38.1.0Opensuse Opensuse 13.2Opensuse Opensuse 13.1Suse Linux Enterprise 12.0Opensuse Leap 42.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook