CVE-2019-9969

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to xnview+0x385399...

CVE-2019-9966

XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c...

CVE-2019-9965

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap...

CVE-2019-9962

XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy...

The vulnerability of the FileReader component in Google Chrome’s browser allows a hacker to execute arbitrary code.

The vulnerability of the FileReader component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems exists due to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the TIFFWriteDirectorySec() function in the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the TIFFWriteDirectorySec function tifdirwrite.c in the LibTIFF library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted file...

Medium: binutils

Issue Overview: The bfdcacheclose function in bfd/cache.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue...

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft Office is an office software suite product. A remote code execution vulnerability exists in Microsoft Office Access Connectivity Engine. An attacker can exploit the vulnerability to execute arbitrary code via a constructed file...

CVE-2019-9766

Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .mp3 file...

Stack overflow

Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wma file...

Stack overflow

Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .mp3 file...

CVE-2019-9767

Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wma file...

Microsoft Windows Jet Database Engine Remote Code Execution Vulnerability (CNVD-2019-07330)

Microsoft Windows Server and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Jet Database Engine is one of the database engines. Windows J...

CVE-2019-9718

In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...

Jet Database Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

Debian DSA-4405-1 : openjpeg2 - security update

Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, that could be leveraged to cause a denial of service or possibly remote code execution. - CVE-2017-17480 Write stack-based buffer overflow in the jp3d and jpwl codecs can result in a denial of service or...

libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c

A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file. An attacker could use this vulnerability to cause a denial of service via a crafted file...

libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c

A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file. An attacker could use this vulnerability to cause a denial of service via a crafted file...

CVE-2017-12447

GdkPixBuf aka gdk-pixbuf, possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service stack corruption or possibly have unspecified other impact via a crafted file folder...