CVE-2017-9185

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7...

CVE-2017-9160

libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscannergettoken function in input-pnm.c:458:12...

CVE-2017-9186

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17...

CVE-2017-9184

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7...

CVE-2017-9162

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:191:2...

CVE-2017-9158

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadraw function in input-pnm.c:336:11...

CVE-2017-9179

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:425:14...

CVE-2017-9175

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c:353:25...

CVE-2017-9178

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c:421:11...

CVE-2017-9173

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29...

CVE-2017-9177

CVE-2017-9177 affects AutoTrace 0.31.1 (libautotrace.a). A denial-of-service can be triggered remotely via malformed BMP input, due to an invalid read/SEGV in ReadImage (input-bmp.c:390:12). Impact is partial availability loss. Some advisories report unpatched status for affected distros; no patc...

CVE-2017-9199

CVE-2017-9199 affects AutoTrace 0.31.1 (libautotrace.a) with a fault in input-tga.c:192:19 where an operation cannot be represented in type int, leading to denial of service. Multiple sources (CNVD, Red Hat, SUSE/Nessus context) describe this as a DoS vulnerability in the AutoTrace bitmap/tga pro...

CVE-2017-9170

CVE-2017-9170 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in ReadImage (input-bmp.c:370:25). This vulnerability is documented across multiple sources (NVD, Red Hat advisories, CNVD) with the same description; some sources describe potential arbitrary code execut...

CVE-2017-9169

CVE-2017-9169 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based overflow in ReadImage (input-bmp.c:355:25). Multiple sources describe a heap overflow that could allow execution of arbitrary code or cause a denial of service. The available documents identify the affected software and ...

CVE-2017-9191

CVE-2017-9191 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in rle_fread (input-tga.c:252:15). Multiple sources (CNVD, Red Hat, SUSE, NVD) describe potential arbitrary code execution or denial of service via crafted bitmap (TGA) files. Public exploit status isn’t ...

CVE-2017-9190

CVE-2017-9190 affects AutoTrace 0.31.1 where libautotrace.a is vulnerable due to a flaw in free_bitmap (bitmap.c:24:5) that can cause a denial of service via an invalid free. Multiple advisories reference a bitmap double-free/invalid-free issue and note this vulnerability alongside related CVEs (...

CVE-2017-9167

CVE-2017-9167 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer overflow is caused by ReadImage in input-bmp.c:337:25, which can lead to arbitrary code execution or denial of service as described in CNVD/NVD entries. No patch/version remediation details are provided in the supplied d...

CVE-2017-9198

CVE-2017-9198 affects AutoTrace 0.31.1: libautotrace.a contains a bug in input-tga.c at line 508:18 described as a “cannot be represented in type int” issue. The connected documents consistently reference this exact file/line and the underlying integer representation problem. There is no explicit...

CVE-2017-9164

CVE-2017-9164 details (Normal mode) Affected software: AutoTrace 0.31.1, specifically libautotrace.a. Vulnerability: heap-based buffer over-read in the GET_COLOR function located in color.c:16:11 of AutoTrace 0.31.1. Impact (as per document): confidentiality, integrity, and availability are poten...

CVE-2017-9154

CVE-2017-9154 affects AutoTrace 0.31.1: libautotrace.a has a flaw in the GET_COLOR function (color.c:16:11) that enables remote attackers to cause a denial of service via invalid reads and a SEGV. Several sources corroborate the issue in AutoTrace 0.31.1 and describe it as a denial of service. Th...