Количество 24 256
Количество 24 256
CVE-2009-5063
Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244.
CVE-2009-4487
CVE-2009-4484
CVE-2009-3767
CVE-2009-1890
CVE-2009-1241
CVE-2009-0590
CVE-2008-3914
CVE-2008-3913
CVE-2008-3912
CVE-2008-3908
CVE-2008-2149
CVE-2008-0888
CVE-2007-6353
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
CVE-2007-6109
CVE-2007-4998
cp when running with an option to preserve symlinks on multiple OSes allows local user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
CVE-2007-4559
CVE-2007-3205
The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.
CVE-2007-2768
CVE-2007-2650
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2009-5063 Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244. | 1% Низкий | 11 месяцев назад | |
| 27% Средний | больше 5 лет назад | ||
| 70% Средний | почти 6 лет назад | ||
| 3% Низкий | почти 6 лет назад | ||
| 16% Средний | около 4 лет назад | ||
| 4% Низкий | почти 6 лет назад | ||
| 6% Низкий | почти 6 лет назад | ||
| 4% Низкий | почти 6 лет назад | ||
| 3% Низкий | почти 6 лет назад | ||
| 3% Низкий | почти 6 лет назад | ||
| 4% Низкий | больше 4 лет назад | ||
| 4% Низкий | больше 4 лет назад | ||
| 6% Низкий | почти 6 лет назад | ||
| CVE-2007-6353 Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. | 5% Низкий | 10 месяцев назад | |
| 3% Низкий | около 4 лет назад | ||
| CVE-2007-4998 cp when running with an option to preserve symlinks on multiple OSes allows local user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination. | 0% Низкий | 5 месяцев назад | |
| 27% Средний | почти 2 года назад | ||
| CVE-2007-3205 The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin. | 2% Низкий | 10 месяцев назад | |
| 9% Низкий | почти 6 лет назад | ||
| 3% Низкий | почти 6 лет назад |
Уязвимостей на страницу