# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
51 |
CVE-2017-9203 |
787 |
|
DoS |
2017-05-23 |
2019-10-03 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
imagew-main.c:960:12 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (buffer underflow) via a crafted image, related to imagew-bmp.c. |
52 |
CVE-2017-9202 |
369 |
|
DoS |
2017-05-23 |
2019-09-16 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted image, related to imagew-api.c. |
53 |
CVE-2017-9201 |
369 |
|
DoS |
2017-05-23 |
2019-09-16 |
4.3 |
None |
Remote |
Medium |
Not required |
None |
None |
Partial |
imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted image, related to imagew-api.c. |
54 |
CVE-2017-9200 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63. |
55 |
CVE-2017-9199 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19. |
56 |
CVE-2017-9198 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18. |
57 |
CVE-2017-9197 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55. |
58 |
CVE-2017-9196 |
190 |
|
|
2017-05-23 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7. |
59 |
CVE-2017-9195 |
125 |
|
|
2017-05-23 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27. |
60 |
CVE-2017-9194 |
125 |
|
|
2017-05-23 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29. |
61 |
CVE-2017-9193 |
125 |
|
|
2017-05-23 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33. |
62 |
CVE-2017-9192 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7. |
63 |
CVE-2017-9191 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c:252:15. |
64 |
CVE-2017-9190 |
416 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5. |
65 |
CVE-2017-9189 |
125 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c:16:11. |
66 |
CVE-2017-9188 |
20 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63. |
67 |
CVE-2017-9187 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7. |
68 |
CVE-2017-9186 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17. |
69 |
CVE-2017-9185 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7. |
70 |
CVE-2017-9184 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7. |
71 |
CVE-2017-9183 |
704 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7. |
72 |
CVE-2017-9182 |
416 |
|
DoS |
2017-05-23 |
2019-03-19 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11. |
73 |
CVE-2017-9181 |
787 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c. |
74 |
CVE-2017-9180 |
125 |
|
DoS |
2017-05-23 |
2019-03-19 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:440:14. |
75 |
CVE-2017-9179 |
125 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:425:14. |
76 |
CVE-2017-9178 |
787 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:421:11. |
77 |
CVE-2017-9177 |
125 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:390:12. |
78 |
CVE-2017-9176 |
787 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:370:25. |
79 |
CVE-2017-9175 |
787 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:353:25. |
80 |
CVE-2017-9174 |
125 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:21:23. |
81 |
CVE-2017-9173 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29. |
82 |
CVE-2017-9172 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29. |
83 |
CVE-2017-9171 |
125 |
|
|
2017-05-23 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24. |
84 |
CVE-2017-9170 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25. |
85 |
CVE-2017-9169 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:355:25. |
86 |
CVE-2017-9168 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25. |
87 |
CVE-2017-9167 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25. |
88 |
CVE-2017-9166 |
125 |
|
|
2017-05-23 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:18:11. |
89 |
CVE-2017-9165 |
125 |
|
|
2017-05-23 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:17:11. |
90 |
CVE-2017-9164 |
125 |
|
|
2017-05-23 |
2019-10-03 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:16:11. |
91 |
CVE-2017-9163 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54. |
92 |
CVE-2017-9162 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:191:2. |
93 |
CVE-2017-9161 |
190 |
|
|
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23. |
94 |
CVE-2017-9160 |
119 |
|
Overflow |
2017-05-23 |
2017-05-28 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscanner_gettoken function in input-pnm.c:458:12. |
95 |
CVE-2017-9159 |
787 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_rawpbm function in input-pnm.c:391:15. |
96 |
CVE-2017-9158 |
787 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_raw function in input-pnm.c:336:11. |
97 |
CVE-2017-9157 |
787 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_ascii function in input-pnm.c:306:14. |
98 |
CVE-2017-9156 |
787 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_ascii function in input-pnm.c:303:12. |
99 |
CVE-2017-9155 |
125 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the input_pnm_reader function in input-pnm.c:243:3. |
100 |
CVE-2017-9154 |
125 |
|
DoS |
2017-05-23 |
2017-05-28 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:16:11. |