CVE-2019-14906

CVE-2019-14906 is a confirmed SDL vulnerability affecting SDL 1.2.15 and 2.x up to 2.0.9. The issue is a heap-based buffer overflow when copying an existing surface into a new optimized one due to insufficient validation while loading BMP images (SDL_LoadBMP_RW), enabling potential code execution...

SDL security update

CentOS Errata and Security Advisory CESA-2019:4024 An update for SDL is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2019-14906

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. A heap-based buffer overflow flaw, in SDL while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application tha...

CVE-2019-3950

CVE-2019-3950 affects Arlo Base Station firmware 1.12.0.1_27940 and prior, enabling root access via a hardcoded username/password when the onboard serial interface is available. The UART weakness is reinforced by a hardcoded encryption key, and a second issue (CVE-2019-3950) involves a networking...

Security Camera Firm Arlo Zaps High-Severity Bugs

Two high-severity vulnerabilities in Arlo Technologies’ wireless home security camera gear have been patched. The flaws, which indirectly impact Arlo’s popular fleet of wireless home security cameras, are limited to adversaries with local network and physical access to Arlo Base Stations. Both...

Ubuntu 18.10 : ZNC vulnerability (USN-3950-1)

It was discovered that ZNC incorrectly handled certain invalid encodings. An authenticated remote user could use this issue to cause ZNC to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block...

CVE-2018-3950

An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single...

CVE-2018-3950

An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single...

CVE-2018-3950

The CVE-2018-3950 issue affects TP-Link TL-R600VPN HTTP server in HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3. The root cause is a stack overflow in the ping_addr handling within the ping/tracert path, triggered by a specially crafted IP address sent via an authenticated HTTP request, enabling remote code ...

CVE-2018-3950

creationtimestamp| type| source ---|---|--- 2018-11-21 17:54:32+00:00| seen| MISP/5bf59afb-1fb8-4a70-991c-75ea0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...

TP-Link HTTP server ping address remote code execution (CVE-2018-3950)

An exploitable remote code execution vulnerability exists in TP-Link TL-R600VPN http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single authenticated HTTP request to trigger this vulnerability...

CVE-2017-3950

...

CVE-2017-3950

CVE-2017-3950 entry is rejected/not used per the Initial Description.

Debian DSA-3950-1 : libraw - security update

Hossein Lotfi and Jakub Jirasek from Secunia Research have discovered multiple vulnerabilities in LibRaw, a library for reading RAW images. An attacker could cause a memory corruption leading to a DoS Denial of Service with craft KDC or TIFF file. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2016-3950

Huawei AR3200 routers are affected by CVE-2016-3950 due to an input validation vulnerability in the AR3200 that allows an authenticated attacker to send malformed packets, triggering a denial-of-service restart. The issue affects software prior to V200R006C10SPC300. Huawei’s security advisory HWP...

Security Advisory - Input Validation Vulnerability in Huawei AR3200

There is an input validation vulnerability in Huawei AR3200, which allows an attacker who logs into the device to send malformed packets, causing the AR3200 occasionally restart and a Denial of Service. Vulnerability ID: HWPSIRT-2015-10047 This vulnerability has been assigned Common Vulnerabiliti...

CVE-2015-3950

CVE-2015-3950 is a CSRF vulnerability in XZERES 442SR OS (Wind Turbine 442SR) that allows a remote attacker to hijack the admin’s session by using a crafted GET request to switch the default admin user. Affected component: the 442SR OS web interface; root cause reported as CSRF via GET leading to...

Microsoft Graphics Filters TIFF Image Converter Buffer Overflow (MS10-105) - Ver2 (CVE-2010-3950)

Tagged Image File Format TIFF is a container format for storing images, including photographs and line art. A buffer overflow vulnerability has been discovered in the way that Microsoft Office parses specially crafted TIFF image files. The vulnerability is due to an error in Microsoft Office TIFF...

CVE-2011-3950

The diracdecodedataunit function in libavcodec/diracdec.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via a crafted value in the reference pictures number...

CVE-2011-3950

The CVE-2011-3950 issue affects FFmpeg up to version 0.10, specifically the dirac_decode_data_unit function in libavcodec/diracdec.c, allowing remote attackers to cause an unspecified impact via a crafted reference pictures number. Public sources in the connected documents confirm the vulnerabili...