Freeware Advanced Audio Coder Invalid Memory Address Dereference Vulnerability (NVD-C-2018-131270)

Freeware Advanced Audio Coder FAAC is a software program that contains the AAC encoder FAAC and the decoder FAAD2. An invalid memory address dereference vulnerability exists in the huffcode function in libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2, which can be exploited by an...

CVE-2018-19889

The CVE-2018-19889 issue affects FAAC 1.29.9.2: an invalid memory address dereference in the huffcode function (libfaac/huff2.c) can cause a segmentation fault and application crash, resulting in a denial of service in the “book 6” case. This is documented across multiple sources (e.g., NVD, Red ...

PT-2018-3712 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-16 Description: The issue is related to an infinite loop in the coders/bmp.c component of ImageMagick, which can cause high CPU and memory consumption, leading to a denial of service. Remote attackers can...

Freeware Advanced Audio Coder Invalid Memory Address Dereference Vulnerability (CNVD-2019-05828)

Freeware Advanced Audio Coder FAAC is a software program that contains the AAC encoder FAAC and the decoder FAAD2. An invalid memory address dereference vulnerability exists in the huffcode function in libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2, which can be exploited by an...

CVE-2018-19887

An invalid memory address dereference was discovered in the huffcode function libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 4 case...

CVE-2018-19890

An invalid memory address dereference was discovered in the huffcode function libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2. The vulnerability causes a segmentation fault and application crash, which leads to denial of service in the book 2 case...

DEBIAN-CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

UBUNTU-CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

PT-2018-3702 · Imagemagick +1 · Imagemagick +1

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8 through 7.0.13 Description: The issue is related to a heap-based buffer over-read in the EncodeImage function of coders/pict.c. This allows attackers to cause a denial of service via a crafted SVG image file. The...

UBUNTU-CVE-2018-18016

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c...

DEBIAN-CVE-2018-17965

ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c...

UBUNTU-CVE-2018-17966

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c...

ImageMagick Denial of Service Vulnerability (CNVD-2019-12132)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in ImageMagick versions 7.0.7-29 and earlier, which stems from a failure to perform a NULL check in ReadOneJNGImage in...

DEBIAN-CVE-2018-16749

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service WriteBlob assertion failure and application exit via a crafted file...

DVD Photo Slideshow Professional 8.07 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: DVD Photo Slideshow Professional 8.07 - Buffer Overflow SEH Exploit Author:T3jv1l Vendor Homepage:http://www.dvd-photo-slideshow.com/ Software:www.dvd-photo-slideshow.com/dpsinstall.exe Category:Local...

DVD Photo Slideshow Professional 8.07 - Buffer Overflow (SEH)

Exploit Title: DVD Photo Slideshow Professional 8.07 - Buffer Overflow SEH Date: 2018-09-06 Exploit Author:T3jv1l Vendor Homepage:http://www.dvd-photo-slideshow.com/ Software:www.dvd-photo-slideshow.com/dpsinstall.exe Category:Local Contact:https://twitter.com/T3jv1l Version: DVD Photo Slideshow...

DEBIAN-CVE-2018-16640

ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c...

UBUNTU-CVE-2018-16640

ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c...

UBUNTU-CVE-2018-14435

ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...

Drupal Coder Module Deserialization RCE

The version of Drupal running on the remote web server is affected by a remote code execution vulnerability in the Coder module, specifically in file coderupgrade.run.php, due to improper validation of user-supplied input to the unserialize function. An unauthenticated, remote attacker can exploi...