734 matches found
CVE-2017-9167
CVE-2017-9167 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer overflow is caused by ReadImage in input-bmp.c:337:25, which can lead to arbitrary code execution or denial of service as described in CNVD/NVD entries. No patch/version remediation details are provided in the supplied d...
CVE-2017-9177
CVE-2017-9177 affects AutoTrace 0.31.1 (libautotrace.a). A denial-of-service can be triggered remotely via malformed BMP input, due to an invalid read/SEGV in ReadImage (input-bmp.c:390:12). Impact is partial availability loss. Some advisories report unpatched status for affected distros; no patc...
CVE-2017-9162
CVE-2017-9162 affects AutoTrace 0.31.1 (libautotrace.a) with an issue in autotrace.c:191:2 described as a quantity that cannot be represented in type int. Public sources concur the vulnerability lies in AutoTrace 0.31.1 and reference autotrace.c:191:2; Red Hat/NVD entries describe potential DoS o...
CVE-2017-9155
CVE-2017-9155 affects AutoTrace 0.31.1 (libautotrace.a). The vulnerability is caused by a flaw in the input_pnm_reader function (input-pnm.c:243:3) that can lead to denial of service via an invalid read and SEGV. The connected documents confirm the affected software and issue, but there is no rem...
CVE-2017-9170
CVE-2017-9170 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in ReadImage (input-bmp.c:370:25). This vulnerability is documented across multiple sources (NVD, Red Hat advisories, CNVD) with the same description; some sources describe potential arbitrary code execut...
CVE-2017-9180
CVE-2017-9180 affects AutoTrace 0.31.1: libautotrace.a vulnerable via ReadImage in input-bmp.c:440:14, enabling remote denial of service through an invalid read/SEGV. Details consistently point to the bitmap-reading path (input-bmp.c) as the root cause. No public patch/version remediation details...
CVE-2017-9195
CVE-2017-9195 affects AutoTrace, with libautotrace.a in AutoTrace 0.31.1 exhibiting a heap-based buffer over-read in ReadImage (input-tga.c:620:27). This CVE is corroborated across multiple sources (NVD, Red Hat advisories, SUSE). Exploitation details, affected products beyond AutoTrace 0.31.1, a...
CVE-2017-9160
libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscannergettoken function in input-pnm.c:458:12...
CVE-2017-9179
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:425:14...
CVE-2017-9194
CVE-2017-9194 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer over-read exists in the ReadImage function (input-tga.c:559:29). CVSS data in the initial entry flags a network attack vector with no authentication and partial confidentiality/integrity/availability impact (base scores ...
CVE-2017-9158
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadraw function in input-pnm.c:336:11...
CVE-2017-9184
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7...
CVE-2017-9164
CVE-2017-9164 details (Normal mode) Affected software: AutoTrace 0.31.1, specifically libautotrace.a. Vulnerability: heap-based buffer over-read in the GET_COLOR function located in color.c:16:11 of AutoTrace 0.31.1. Impact (as per document): confidentiality, integrity, and availability are poten...
CVE-2017-9186
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17...
CVE-2017-9197
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55...
CVE-2017-9165
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11...
CVE-2017-9193
CVE-2017-9193 affects AutoTrace 0.31.1’s libautotrace.a; a heap-based buffer over-read occurs in ReadImage (input-tga.c:538:33). CVSS v2/3 scores indicate HIGH/CRITICAL impact (network, no auth, no user interaction). Affected product is AutoTrace; no patch/version fix details are provided in the ...
CVE-2017-9173
CVE-2017-9173 affects AutoTrace 0.31.1: libautotrace.a (ReadImage in input-bmp.c:497:29) contains a heap-based buffer overflow. Exploitation could lead to arbitrary code execution or a denial of service. The connected documents (RH/NVD/CNVD/SUSE/PT/security feeds) confirm the issue but provide no...
CVE-2017-9190
CVE-2017-9190 affects AutoTrace 0.31.1 where libautotrace.a is vulnerable due to a flaw in free_bitmap (bitmap.c:24:5) that can cause a denial of service via an invalid free. Multiple advisories reference a bitmap double-free/invalid-free issue and note this vulnerability alongside related CVEs (...