Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
References
Configurations
History
18 Dec 2023, 05:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
25 Nov 2023, 23:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
07 Nov 2023, 03:19
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
15 Sep 2023, 21:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
06 Sep 2023, 03:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
24 Aug 2023, 21:57
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://sourceforge.net/p/freeimage/bugs/299/ - Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
First Time |
Freeimage Project freeimage
Freeimage Project |
|
CPE | cpe:2.3:a:freeimage_project:freeimage:3.18.0:*:*:*:*:*:*:* | |
CWE | CWE-120 |
22 Aug 2023, 20:10
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-08-22 19:16
Updated : 2024-02-28 20:33
NVD link : CVE-2020-21428
Mitre link : CVE-2020-21428
CVE.ORG link : CVE-2020-21428
JSON object : View
Products Affected
freeimage_project
- freeimage
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')