PI
Product
Picasa
11
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Picasa to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-8221 | – | Nov 17 | Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based… Affected: through 3.9.140 |
| CVE-2015-8096 | – | Nov 9 | Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to "phase one 0x412 tag," which… Affected: 3.9.140 |
| CVE-2013-5359 | – | Jan 9 | Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as… Affected: 3.9.0 |
| CVE-2013-5358 | – | Jan 9 | Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a… Affected: 3.9.0 |
| CVE-2013-5357 | – | Jan 9 | Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer… Affected: 3.9.0 |
| CVE-2013-5349 | – | Jan 9 | Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a crafted JPEG tag that triggers a heap-based… Affected: 3.9.0 |
| CVE-2011-2747 | – | Jul 28 | Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file Affected: through 3.6_build_105.65; 3.5; 3.5_build_79.67; 3.5_build_79.69; 3.5_build_79.74; 3.5_build_79.81; +4 more |
| CVE-2011-0458 | – | Mar 28 | Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the… Affected: through 3.6 |
| CVE-2007-4847 | – | Sep 12 | Google Picasa allows remote attackers to read image files stored by Picasa via unspecified vectors involving a picasa:// URI Affected: All versions, or not specified |
| CVE-2007-4823 | – | Sep 11 | Multiple buffer overflows in Google Picasa have unspecified attack vectors and impact Affected: All versions, or not specified |
| CVE-2007-4824 | – | Sep 11 | Multiple cross-application scripting (XAS) vulnerabilities in Google Picasa have unspecified attack vectors and impact Affected: All versions, or not specified |
Showing 11