29 matches found
CVE-2020-9545
CVE-2020-9545 affects Pale Moon 28.x prior to 28.8.4. The vulnerability is a segmentation fault related to the module scripting subsystem, demonstrated by a Lacoste site. Multiple connected sources (NVD, Red Hat advisory references, and vendor records) confirm the same description. No root-cause ...
CVE-2019-9545
CVE-2019-9545 affects Poppler 0.74.0: a recursive call in JBIG2Stream::readTextRegion() (JBIG2Stream.cc) can be triggered by a crafted PDF (e.g., via pdfimages) to cause a Denial of Service (segfault) and potentially other impact related to JBIG2Bitmap::clearToZero. Connected advisories (OSV) con...
CVE-2018-9545
CVE-2018-9545 affects Android 9, with a local escalation of privilege due to an out-of-bounds write in BTA_HdRegisterApp (bta_hd_api.cc) caused by a missing bounds check. The issue enables a local attacker to potentially escalate privileges without user interaction. The vulnerability is documente...
Fedora Update for mpg123 FEDORA-2017-172410ec92
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mpg123 FEDORA-2017-c89d94d812
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated mpg123 packages fix security vulnerabilities
The nexttext function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service buffer over-read via a crafted mp3 file CVE-2017-9545. Invalid read of size 1 in ID3v2 parser due to forgotten offset from the frame flag bytes CVE-2017-10683. Extend pow tables for...
ALPINE-CVE-2017-9545
The nexttext function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service buffer over-read via a crafted mp3 file...
CVE-2017-9545
CVE-2017-9545 affects mpg123 1.24.0, where the next_text path in src/libmpg123/id3.c accepts crafted MP3s to trigger a denial of service via a buffer over-read. The Mageia MGASA-2017-0249 advisory explicitly lists CVE-2017-9545 with this cause, and Ubuntu USN-4806-1 (and Fedora updates) reference...
Fedora Update for java-1.6.0-openjdk FEDORA-2012-9545
Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Fedora Update for java-1.6.0-openjdk FEDORA-2012-9545 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...