libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service

In libpng 1.6.34, a wrong calculation of rowfactor in the pngcheckchunklength function pngrutil.c may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service...

openSUSE Security Update : binutils (openSUSE-2018-1222)

This update for binutils to version 2.31 fixes the following issues : These security issues were fixed : - CVE-2017-15996: readelf allowed remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other impact via a crafted ELF file that triggered a...

The vulnerability in the set of components of Device Guard for Windows operating systems allows a hacker to circumvent security restrictions.

The vulnerability of the Device Guard component of the Windows operating system is related to errors during file signature verification. Exploiting this vulnerability can allow an attacker to circumvent security restrictions using a specially crafted file...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:3191-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069...

GHSA-5MF7-26MW-3RQR Moderate severity vulnerability that affects org.apache.tika:tika-core

A carefully crafted or fuzzed file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-21830)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the vAlign property of TimeField in Foxit Reader 9.2.0.9297 and earli...

UBUNTU-CVE-2018-18310

An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service application crash with a crafted ELF file, as demonstrated by considernotes...

The vulnerability of the RTF text processor, the Atlantis Word Processor, allows a hacker to execute arbitrary code.

The vulnerability of the Atlantis Word Processor, a RTF text processor, arises due to errors during initialization of variables. Exploiting this vulnerability allows an attacker to execute arbitrary code within the application, using a specially created RTF file...

Microsoft Windows Graphics Component Remote Code Execution Vulnerability (CNVD-2018-20739)

Microsoft Excel Viewer 2007 SP3 is a product of Microsoft Corporation.Microsoft Excel Viewer 2007 SP3 is a spreadsheet program.Windows 10 is a set of operating systems for personal computers.Graphics Windows 10 is an operating system for personal computers.Graphics Components is one of the graphi...

Microsoft Windows Theme API Remote Code Execution Vulnerability

Microsoft Windows 10 and others are a set of new generation cross-platform operating systems released by Microsoft.Windows Theme API is one of the Windows system theme components. A remote code execution vulnerability exists in Microsoft Windows Theme API, which is caused by the program failing t...

Microsoft Graphics Components Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information that could be useful for further exploitation. To exploit the vulnerability, a user would have t...

Design/Logic Flaw

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

The vulnerability of the CollectValuesOrEntriesImpl function in the Android operating system’s Framework component, which allows a hacker to escalate their privileges

The vulnerability of the CollectValuesOrEntriesImpl function in the Framework component of the Android operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to increase their privileges using a special...

Vulnerability of the AMediaCodecCryptoInfo_new function in the Android operating system’s framework component, allowing a hacker to execute arbitrary code

The vulnerability of the AMediaCodecCryptoInfonew function in NdkMediaCodec.cpp of the Android operating system’s framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a...

The vulnerability of the `checkGrantUriPermissionLocked` function in the Android operating system’s Framework component, which allows a hacker to escalate their privileges

The vulnerability of the checkGrantUriPermissionLocked function in the ActivityManagerService.java file of the Android operating system’s framework is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges through a...

PT-2018-16360 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit Software's PDF Reader version 9.2.0.9297 Description: A use-after-free issue in the JavaScript engine of Foxit Software's PDF Reader can be exploited by opening a specially crafted PDF document, potentially leading to arbitrary code...

PT-2018-16336 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit Software's PDF Reader version 9.1.0.5096 Description: A use-after-free issue in the JavaScript engine of Foxit Software's PDF Reader can be exploited by opening a specially crafted PDF document, potentially leading to arbitrary code...

CVE-2018-17433

A heap-based buffer overflow in ReadGifImageDesc in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file...

CVE-2018-17437

Memory leak in the H5Odtypedecodehelper function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service memory consumption via a crafted HDF5 file...