libfpx project records

8 published records for vendor libfpx project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
27Monitor	CVE-2018-6876No exploit	The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackersimagemagick · imagemagick · CWE-119 Pre-auth Memory safety Denial of service	Medium6.5	—	2.4%	Feb 9, 2018
26Monitor	CVE-2017-12919No exploit	Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of serviclibfpx project · libfpx · CWE-119 Pre-auth Memory safety Denial of service	Medium6.5	—	1.3%	Aug 28, 2017
26Monitor	CVE-2017-12921No exploit	PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointelibfpx project · libfpx · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.2%	Aug 28, 2017
26Monitor	CVE-2017-12922No exploit	wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.libfpx project · libfpx · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.2%	Aug 28, 2017
26Monitor	CVE-2017-12923No exploit	OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) vlibfpx project · libfpx · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.2%	Aug 28, 2017
26Monitor	CVE-2017-12924No exploit	CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a cralibfpx project · libfpx · CWE-369 Pre-auth Denial of service	Medium6.5	—	1.2%	Aug 28, 2017
26Monitor	CVE-2017-12925No exploit	Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted flibfpx project · libfpx · CWE-415 Pre-auth Memory safety Denial of service	Medium6.5	—	1.2%	Aug 28, 2017
26Monitor	CVE-2017-12920No exploit	CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a libfpx project · libfpx · CWE-476 Pre-auth Memory safety Denial of service	Medium6.5	—	1.2%	Aug 28, 2017

CVE-2018-6876
27Monitor
The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers
MediumCVSS 6.5No exploitEPSS 2%
imagemagick · imagemagickFeb 9, 2018
CVE-2017-12919
26Monitor
Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of servic
MediumCVSS 6.5No exploitEPSS 1%
libfpx project · libfpxAug 28, 2017
CVE-2017-12921
26Monitor
PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointe
MediumCVSS 6.5No exploitEPSS 1%
libfpx project · libfpxAug 28, 2017
CVE-2017-12922
26Monitor
wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
MediumCVSS 6.5No exploitEPSS 1%
libfpx project · libfpxAug 28, 2017
CVE-2017-12923
26Monitor
OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) v
MediumCVSS 6.5No exploitEPSS 1%
libfpx project · libfpxAug 28, 2017
CVE-2017-12924
26Monitor
CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a cra
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Denial of service
libfpx project · libfpxAug 28, 2017
CVE-2017-12925
26Monitor
Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted f
MediumCVSS 6.5No exploitEPSS 1%
libfpx project · libfpxAug 28, 2017
CVE-2017-12920
26Monitor
CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a
MediumCVSS 6.5No exploitEPSS 1%
libfpx project · libfpxAug 28, 2017