Security Vulnerabilities - CVEs Published In August 2017
Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.
CVSS Score
6.5
EPSS Score
0.005
Published
2017-08-28
Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.
CVSS Score
6.5
EPSS Score
0.012
Published
2017-08-28
Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image.
CVSS Score
6.5
EPSS Score
0.005
Published
2017-08-28
CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
CVSS Score
6.5
EPSS Score
0.005
Published
2017-08-28
PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
CVSS Score
6.5
EPSS Score
0.005
Published
2017-08-28
wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
CVSS Score
6.5
EPSS Score
0.005
Published
2017-08-28
OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
CVSS Score
6.5
EPSS Score
0.005
Published
2017-08-28
libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).
CVSS Score
7.5
EPSS Score
0.008
Published
2017-08-28
Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mms_dll_r.dll or mediaplayerdll.dll.
CVSS Score
7.8
EPSS Score
0.001
Published
2017-08-28
Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-08-28