8 matches found
CVE-2020-16796
CVE-2020-16796 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-16796
CVE-2018-16796 affects HiScout GRC Suite prior to 3.1.5, where the file-upload functionality allows unrestricted upload of files with dangerous types. The issue, described in SySS advisory SYSS-2018-015 and mirrored in multiple feeds, is a vulnerability in the product’s handling of uploaded conte...
HiScout GRC Suite File Upload
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2018-015 Product: HiScout GRC Suite Manufacturer: HiScout GmbH Affected Versions: 3.1.5 Tested Versions: 3.1.3.12 Vulnerability Type: Unrestricted Upload of File with Dangerous Type Risk Level: High Solution Status: Fixed...
CVE-2017-16796
CVE-2017-16796 affects SWFTools 0.9.2 where the png_load function in lib/png.c does not check the return value of realloc. The root cause is a missing check on realloc, which can lead to a denial of service via an invalid write and application crash when processing a crafted PNG with an IDAT tag....
CVE-2017-16796
In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...