CVE-2019-13615

CVSS v3 Score
5.5
Medium
CVSS v2 Score
4.3
Medium

Vulnerability Description

libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement.

CVSS:5.5(Medium)

Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written...

CVSS:5.5(Medium)

PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).

CVSS:5.5(Medium)

DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).

CVSS:5.5(Medium)

ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.

CVSS:5.5(Medium)

ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.

CVSS:5.5(Medium)

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.