UBUNTU-CVE-2018-17076

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file...

CVE-2018-17076

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file...

Design/Logic Flaw

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file...

CVE-2018-17076

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file...

CVE-2018-17076

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file...

CVE-2018-16517

asm/labels.c in Netwide Assembler NASM is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file...

CVE-2018-17000

CVE-2018-17000 is a vulnerability in LibTIFF/TIFF handling where a NULL pointer dereference in tif_unix.c (TIFFmemcmp) can be triggered by a crafted TIFF file, potentially via TIFF-writing utilities, yielding a denial of service. Public details in connected Debian advisory confirm the issue affec...

Design/Logic Flaw

Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...

CVE-2018-16982

Open Chinese Convert OpenCC 1.0.5 allows attackers to cause a denial of service segmentation fault because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file...

tika: Infinite loop in BPGParser can allow remote attacker to cause a denial of service

An infinite loop vulnerability was discovered in Apache Tika prior to version 1.18. A remote attacker could exploit this to cause a denial of service via crafted file...

AttacheCase Directory Traversal Vulnerability (CNVD-2019-17161)

AttacheCase is an open source file encryption software. A directory traversal vulnerability exists in AttacheCase versions 2.8.4.0 and earlier and 3.3.0.0 and earlier, which can be exploited to create or overwrite existing files with the help of a specially crafted ATC file...

CVE-2018-16770

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because a certain newallocator allocate call fails...

CVE-2018-16769

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because libRuntime.so!llvm::InstructionCombiningPass::runOnFunction is mishandled...

Heap overflow

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::popAndValidateOperand...

CVE-2018-16766

In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service application crash or possibly have unspecified other impact because Errors::unreachable is reached...

WAVM Denial of Service Vulnerability (CNVD-2019-09771)

WAVM is the WebAssembly Virtual Machine. A denial of service vulnerability exists in WAVM 2018-07-26 and earlier versions, which stems from the program failing to properly handle the 'libRuntime.so!llvm::InstructionCombiningPass::runOnFunction' function. An attacker can cause a denial of service...

WAVM Buffer Overflow Vulnerability

WAVM is the WebAssembly Virtual Machine. A buffer overflow vulnerability exists in the 'FunctionValidationContext::popAndValidateOperand' function in WAVM 2018-07-26 and earlier versions, which can be exploited by an attacker by sending a specially crafted file to WAVM This can be exploited to...

WAVM Buffer Overflow Vulnerability (CNVD-2019-09770)

WAVM is the WebAssembly Virtual Machine. A heap buffer overflow vulnerability exists in IR::FunctionValidationContext::end in WAVM 2018-07-26 and earlier versions, which can be exploited by an attacker to cause a denial of service application crash by sending a specially crafted file...

Any Sound Recorder 2.93 - Denial of Service (PoC)

Exploit Title: Any Sound Recorder 2.93 - Denial of Service PoC Date: 2018-09-09 Exploit Author: T3jv1l Vendor Homepage: http://www.any-sound-recorder.com Software: http://www.any-sound-recorder.com/anysoundrecorder.exe Version: Any Sound Recorder 2.93 Tested on: Windows 7 SP1 x86 !/usr/bin/python...

Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection Vulnerability

Exploit for windows platform in category local exploits Title: Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection Author: John Page aka hyp3rlinx Vendor: Microsoft Software link: https://www.microsoft.com/en-us/download/details.aspx?id=7558 Software Version: 2.3 References:...