Sdl vulnerabilities
3 vulnerabilities
Known vulnerabilities in Sdl products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Sdl Image2 vulnerabilities
- Web Content Manager1 vulnerabilities
CVE-2018-19371sdlweb_content_manager
EPSS score6.02%
The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system.CVE-2007-6697debiansdl-image1.2+1EPSS score10.73%
Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third party information.CVE-2008-0544debiansdl-image1.2+1EPSS score7.93%
Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted IFF ILBM file. NOTE: some of these details are obtained from third party information.