CPE Details
FreeImage project FreeImage 3.17.0
3.17.0
2015-09-30
08h59 +00:00
08h59 +00:00
2015-11-23
18h38 +00:00
18h38 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:freeimage_project:freeimage:3.17.0:*:*:*:*:*:*:*
Informations
Vendor
freeimage_projectProduct
freeimageVersion
3.17.0Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file. | 9.8 |
Critique |
||
| An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability. | 7.8 |
Haute |
||
| Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window. | 5 |
