51 matches found
UBUNTU-CVE-2017-9193
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33...
UBUNTU-CVE-2017-9178
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c:421:11...
CVE-2017-9153
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadrawpbm function in input-pnm.c:391:13...
Design/Logic Flaw
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the inputpnmreader function in input-pnm.c:243:3...
CVE-2017-9188
libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63...
CVE-2017-9173
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29...
CVE-2017-9192
The CVE-2017-9192 entry affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in the ReadImage function (input-tga.c:528:7). The detail is consistently reported across sources (NVD/Red Hat/SUSE/Nessus-style entries) as a heap overflow in ReadImage within libautotrace.a. T...
PT-2017-18739 · Autotrace Team +1 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to the pnm load ascii function in input-pnm.c, which can cause a denial of service due to an invalid write and SEGV. This is a result of a problem in the libautotrace.a library...
PT-2017-18737 · None +1 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read and SEGV. This is related to the input pnm reader function in input-pnm.c. Recommendations: For AutoTrace versi...
PT-2017-18761 · Autotrace +1 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read and SEGV. This is related to the ReadImage function in input-bmp.c. Recommendations: For AutoTrace version...
UBUNTU-CVE-2013-1953
Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...