UBUNTU-CVE-2017-1000187

In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF...

CVE-2017-1000174

CVE-2017-1000174 concerns SWFTools where an address access exception is triggered in swfdump swf_GetBits(). The issue affects SWFTools components handling SWF data and is described across multiple sources (NVD entry, Red Hat, SUSE, Ubuntu OSV, CNVD) as a vulnerability in swfdump swf_GetBits(), wi...

CVE-2017-1000187

Removed by vendor...

CVE-2017-1000187

In SWFTools, pdf2swf contains a vulnerability in FoFiTrueType::writeTTF() that triggers an address access exception. Affected component: SWFTools’ pdf2swf module (FoFiTrueType::writeTTF). Documented impact indicates potential denial of service. CVSS data provided: CVSS v2 base score 4.3 (Medium) ...

CVE-2017-1000174

Removed by vendor...

SWFTools Address Access Exception Vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. An address access exception vulnerability exists in swfdump swfGetBits in SWFTools. An attacker could exploit this vulnerability to cause a denial of service...

openSUSE Security Update : libsass (openSUSE-2017-1250)

This update for libsass fixes the following DoS vulnerabilities : - CVE-2017-11554: Stack consumption vulnerability allowed remote DoS via crafted input 1050148 - CVE-2017-11555: Illegal address access in Eval::operator allowed remote DoS via crafted input boo1050149 - CVE-2017-11556: Stack...

RHEL 7 : liblouis (RHSA-2017:3111)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3111 advisory. Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and...

liblouis: Illegal address access in the _lou_getALine function

Multiple flaws were found in the processing of translation tables in liblouis. An attacker could crash or potentially execute arbitrary code using malicious translation tables...

liblouis: Illegal address access in the _lou_getALine() function

There is an illegal address access in the function lougetALine in compileTranslationTable.c:343 in Liblouis 3.2.0...

Updated exiv2 packages fix security vulnerabilities & bugs

Opening an image created on certain pentax cameras with gwenview, which uses the exiv2 library, causes gwenview to segfault. Exiv2 upstream created a patch to resolve this problem bugfix - applies only to mga6. The following security issues were also fixed: Heap overflow in...

FreeBSD : ncurses -- multiple issues (b84dbd94-e894-4c91-b8cd-d328537b1b2b)

ncurses developers reports : There are multiple illegal address access issues and an infinite loop issue. Please refer to the CVE list for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

SUSE SLED12 / SLES12 Security Update : liblouis (SUSE-SU-2017:2570-1)

This update for liblouis fixes several issues. These security issues were fixed : - CVE-2017-13738: Prevent illegal address access in the lougetALine function that allowed to cause remote DoS bsc1056105. - CVE-2017-13739: Prevent heap-based buffer overflow in the function resolveSubtable that cou...

SUSE-SU-2017:2570-1 Security update for liblouis

This update for liblouis fixes several issues. These security issues were fixed: - CVE-2017-13738: Prevent illegal address access in the lougetALine function that allowed to cause remote DoS bsc1056105. - CVE-2017-13739: Prevent heap-based buffer overflow in the function resolveSubtable that coul...

Null pointer dereference

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function pastetokens in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service...

CVE-2017-14228

CVE-2017-14228 affects NASM 2.14rc0, caused by an illegal address access (NULL pointer dereference) in paste_tokens() in asm/preproc.c, enabling remote denial of service. The connected Nessus/RH advisories corroborate NASM preproc.c vulnerabilities around that version family, including multiple r...

CVE-2017-14228

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in the function pastetokens in preproc.c, aka a NULL pointer dereference. It will lead to remote denial of service...

CVE-2017-13734

There is an illegal address access in the ncsafestrcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack...

CVE-2017-13733

There is an illegal address access in the fmtentry function in progs/dumpentry.c in ncurses 6.0 that might lead to a remote denial of service attack...

CVE-2017-13731

There is an illegal address access in the function postprocesstermcap in parseentry.c in ncurses 6.0 that will lead to a remote denial of service attack...