793 matches found
CVE-2017-9167
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25...
CVE-2017-9159
CVE-2017-9159 affects AutoTrace 0.31.1 via the libautotrace.a library, with the vulnerability in the pnm_load_rawpbm function (input-pnm.c:391:15). This allows remote attackers to cause a denial of service through an invalid write that can trigger a SEGV. Connected sources confirm the vulnerable ...
CVE-2017-9186
CVE-2017-9186 affects AutoTrace 0.31.1 (libautotrace.a); the issue is in input-bmp.c:326:17 where a value cannot be represented in type int, described by CNVD as a denial-of-service vulnerability. Other connected sources reiterate the same vulnerable component/version; no patch/details are provid...
CVE-2017-9192
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7...
CVE-2017-9183
CVE-2017-9183 affects AutoTrace 0.31.1: libautotrace.a contains a vulnerability in input-bmp.c:309:7 described as “cannot be represented in type int.” Public entries (CNVD/Red Hat/SUSE/Nessus) consistently cite a buffer/overflow risk that could allow arbitrary code execution or denial of service,...
CVE-2017-9172
CVE-2017-9172 affects AutoTrace 0.31.1: the heap-based buffer overflow in the ReadImage function of input-bmp.c (offset 496:29) on libautotrace.a. This vulnerability could allow arbitrary code execution or a denial of service, per multiple sources (CNVD/Red Hat/NVD). The issue is triggered by cra...
CVE-2017-9173
CVE-2017-9173 affects AutoTrace 0.31.1: libautotrace.a (ReadImage in input-bmp.c:497:29) contains a heap-based buffer overflow. Exploitation could lead to arbitrary code execution or a denial of service. The connected documents (RH/NVD/CNVD/SUSE/PT/security feeds) confirm the issue but provide no...
CVE-2017-9200
CVE-2017-9200 affects AutoTrace 0.31.1’s libautotrace.a, with a defect in input-tga.c at line 528 (cannot be represented in type int) that can lead to denial of service. Multiple connected sources corroborate a DoS consequence for this version (e.g., CNVD-2017-08537, RH advisories). No further ex...
CVE-2017-9193
CVE-2017-9193 affects AutoTrace 0.31.1’s libautotrace.a; a heap-based buffer over-read occurs in ReadImage (input-tga.c:538:33). CVSS v2/3 scores indicate HIGH/CRITICAL impact (network, no auth, no user interaction). Affected product is AutoTrace; no patch/version fix details are provided in the ...
CVE-2017-9157
CVE-2017-9157 affects AutoTrace 0.31.1 via library libautotrace.a. The vulnerability is in input-pnm.c at 306:14 (pnm_load_ascii) and can allow a remote attacker to cause a denial of service (invalid write and SEGV). Documents confirm the component and impact but do not provide patch/version info...
CVE-2017-9156
CVE-2017-9156 affects AutoTrace 0.31.1. The vulnerability is in the library component libautotrace.a and relates to the routine in input-pnm.c:303:12 (pnm_load_ascii). An attacker can remotely trigger a denial of service resulting in an invalid write and a crash (SEGV). The available documents co...
CVE-2017-9155
CVE-2017-9155 affects AutoTrace 0.31.1 (libautotrace.a). The vulnerability is caused by a flaw in the input_pnm_reader function (input-pnm.c:243:3) that can lead to denial of service via an invalid read and SEGV. The connected documents confirm the affected software and issue, but there is no rem...
CVE-2017-9179
CVE-2017-9179 affects AutoTrace 0.31.1 (libautotrace.a). The vulnerability stems from a bug in the ReadImage path for BMP handling (input-bmp.c:425:14) that can be triggered by processing a crafted bitmap, enabling a remote attacker to cause a denial of service via an invalid read leading to a SE...
CVE-2017-9165
CVE-2017-9165 affects AutoTrace 0.31.1: the heap-based buffer over-read occurs in libautotrace.a, specifically the GET_COLOR function in color.c:17:11. Multiple sources (NVD/Red Hat/SUSE, Nessus plugins, CNVD, PT Security) consistently describe a heap over-read/overflow scenario in the color load...
CVE-2017-9161
CVE-2017-9161 affects AutoTrace 0.31.1: libautotrace.a contains a defect in autotrace.c at line 188:23 described as a cannot be represented in type int. The connected sources also associate this family of issues with potential denial of service (CNVD/CVE discourse) and related integer overflow co...
CVE-2017-9194
CVE-2017-9194 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer over-read exists in the ReadImage function (input-tga.c:559:29). CVSS data in the initial entry flags a network attack vector with no authentication and partial confidentiality/integrity/availability impact (base scores ...
CVE-2017-9165
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11...
CVE-2017-9195
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27...