793 matches found
UBUNTU-CVE-2017-9190
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid free, related to the freebitmap function in bitmap.c:24:5...
UBUNTU-CVE-2017-9197
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55...
UBUNTU-CVE-2017-9160
libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscannergettoken function in input-pnm.c:458:12...
UBUNTU-CVE-2017-9167
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25...
UBUNTU-CVE-2017-9159
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadrawpbm function in input-pnm.c:391:15...
UBUNTU-CVE-2017-9177
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:390:12...
UBUNTU-CVE-2017-9185
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7...
CVE-2017-9184
CVE-2017-9184 affects AutoTrace 0.31.1: libautotrace.a contains an issue in input-bmp.c:314:7 where an integer/size handling vulnerability can trigger a heap/buffer overflow. Several sources (CNVD, SUSE, Red Hat ecosystem notes) describe this as a vulnerability in AutoTrace 0.31.1 with potential ...
CVE-2017-9188
libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63...
CVE-2017-9197
CVE-2017-9197 pertains to AutoTrace 0.31.1, where the library libautotrace.a contains a bug in input-tga.c:498:55 that cannot be represented in type int. This detail is consistently reported across multiple sources (NVD entry, Red Hat/CVE page, SUSE page, and CNVD) as a denial/denial-of-service s...
CVE-2017-9160
CVE-2017-9160 affects AutoTrace 0.31.1 (libautotrace.a) with a stack-based buffer overflow in pnmscanner_gettoken (input-pnm.c:458:12). Multiple connected sources corroborate the issue and point to potential arbitrary code execution and denial of service. The available documents consistently iden...
CVE-2017-9182
The CVE-2017-9182 entry concerns AutoTrace 0.31.1’s libautotrace.a, where a defect in GET_COLOR (color.c:16:11) can trigger a use-after-free and invalid heap read, allowing a remote denial of service. The vulnerability affects AutoTrace 0.31.1 and is described with a network-facing impact (NVD CV...
CVE-2017-9191
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rlefread function in input-tga.c:252:15...
CVE-2017-9189
CVE-2017-9189 affects AutoTrace 0.31.1 via the libautotrace.a library. The vulnerability is triggered by the GET_COLOR function in color.c:16:11, causing an invalid read and remote denial of service that crashes the application. Exploitation details, affected platforms, and mitigation/fix informa...
CVE-2017-9196
CVE-2017-9196 affects AutoTrace 0.31.1 via the libautotrace.a library. The ReadImage function in input-tga.c at line 528:7 contains a negative-size-param vulnerability that is described as a heap/buffer issue. Public sources (CNVD and related analyses) indicate this flaw could allow an attacker t...
CVE-2017-9155
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the inputpnmreader function in input-pnm.c:243:3...
CVE-2017-9187
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7...
CVE-2017-9164
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:16:11...