Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-18718

EPSS 0.13% · P32
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-18718

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
gThumb 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
gThumb是一款使用在GNOME桌面环境下的开源图像浏览器。 gThumb 3.6.2及之前版本中的dlg-contact-sheet.c文件的add_themes_from_dir方法存在双重释放漏洞，该漏洞源于程序通过调用‘g_free’函数释放了两次相同的缓冲区。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2018-18718

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-18718

Please Login to view more intelligence information

Same Patch Batch · n/a · 2018-10-28 · 40 CVEs total

CVE-2018-18723YUNUCMS 跨站脚本漏洞
CVE-2018-18743SEMCMS 跨站脚本漏洞
CVE-2018-18744SEMCMS 跨站脚本漏洞
CVE-2018-18745SEMCMS 跨站脚本漏洞
CVE-2018-18748Sandboxie 输入验证错误漏洞
CVE-2018-18749data-tools 数字错误漏洞
CVE-2018-18717Eleanor CMS 跨站脚本漏洞
CVE-2018-18720YUNUCMS 跨站脚本漏洞
CVE-2018-18721YUNUCMS 跨站脚本漏洞
CVE-2018-18722YUNUCMS 跨站脚本漏洞
CVE-2018-18742SEMCMS 跨站请求伪造漏洞
CVE-2018-18724YUNUCMS 跨站脚本漏洞
CVE-2018-18725YUNUCMS 跨站脚本漏洞
CVE-2018-18726YUNUCMS 跨站脚本漏洞
CVE-2018-18727多款Tenda产品httpd 缓冲区错误漏洞
CVE-2018-18728Tenda AC9、AC15和AC18 安全漏洞
CVE-2018-18729多款Tenda产品httpd 缓冲区错误漏洞
CVE-2018-18730多款Tenda产品httpd 缓冲区错误漏洞
CVE-2018-18731多款Tenda产品httpd 缓冲区错误漏洞
CVE-2018-18732多款Tenda产品httpd 缓冲区错误漏洞

Showing top 20 of 40 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-18718

No comments yet

Leave a comment