PT-2016-5121

Name of the Vulnerable Software and Affected Versions Quagga versions prior to 1.0.20160309 Description The issue arises from the bgp nlri parse vpnv4 function in bgp mplsvpn.c within the VPNv4 NLRI parser in bgpd when a specific VPNv4 configuration is used. It relies on a Labeled-VPN SAFI...

UBUNTU-CVE-2015-0823

Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used in Mozilla Firefox before 36.0, might allow remote attackers to trigger problematic Developer Console information or possibly have unspecified other impact by leveraging incorrect macro expansion, related to the...

PT-2015-4892

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0 Description The issue is related to multiple use-after-free vulnerabilities in the OpenType Sanitiser, which might allow remote attackers to trigger problematic Developer Console information or possibly...

Out-of-bounds

Array index error in the parsefond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service out-of-bounds read or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file...

UBUNTU-CVE-2014-9672

Array index error in the parsefond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service out-of-bounds read or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file...

Core-Image-Fun-House-2.0

2007-07-10 21:15:34.573 Core Image Fun House1061 CFLog 0: CFPropertyListCreateFromXMLData: plist parse failed; the data is notproper UTF-8. The file name for this data could be:...

DEBIAN-CVE-2014-8625

Multiple format string vulnerabilities in the parseerrormsg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 package or 2 architecture name...

PT-2015-4062

Name of the Vulnerable Software and Affected Versions dpkg versions prior to 1.17.22 Description The issue concerns multiple format string vulnerabilities in the parse error msg function. These vulnerabilities can be exploited by remote attackers to cause a denial of service, potentially leading ...

UBUNTU-CVE-2014-9496

The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a 1 map offset or 2 rsrc marker, which triggers an out-of-bounds read...

PT-2015-4245

Name of the Vulnerable Software and Affected Versions libsndfile affected versions not specified Description The issue is related to the sd2 parse rsrc fork function in sd2.c in libsndfile, which allows attackers to have an unspecified impact through vectors related to a 1 map offset or 2 rsrc...

PT-2014-9005

Name of the Vulnerable Software and Affected Versions LibreSSL versions prior to 2.1.2 Description A double free vulnerability exists in the ssl parse clienthello use srtp ext function in d1 srtp.c, which can be triggered by a certain length-verification error during the processing of a DTLS...

PT-2014-2075

Name of the Vulnerable Software and Affected Versions VLC media player versions prior to 1.0.6 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This can be achieved through an empty location element in an XM...

PT-2017-8788

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted ics file. This is due to a problem in the icalparser parse string...

PT-2017-8789

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by crafting a string to the icalparser parse string function, which is related to the parser...

DEBIAN-CVE-2013-7401

The parserequest function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service crash via a URI without a " " or "?" character in an ICAP request, as demonstrated by use of the OPTIONS method...

UBUNTU-CVE-2013-7401

The parserequest function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service crash via a URI without a " " or "?" character in an ICAP request, as demonstrated by use of the OPTIONS method...

DEBIAN-CVE-2014-9378

Ettercap 0.8.1 does not validate certain return values, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted 1 name to the parseline function in mdnsspoof/mdnsspoof.c or 2 base64 encoded password to the dissectorimap function in...

PT-2014-8973

Name of the Vulnerable Software and Affected Versions Ettercap version 0.8.1 Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code. This can be achieved by sending a crafted name to the parse line function in mdns spoof/mdns spoof.c or a...

PT-2016-3506

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to several functions in FreeType, including t1 parse font matrix, cid parse font matrix, t42 parse font matrix, and ps parser load field, which do not check return values. This...

PT-2016-3507

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue concerns the t42 parse encoding function in type42/t42parse.c, which does not properly update the current position for immediates-only mode. This allows remote attackers to cause a denial ...