CVE-2018-7263

The maddecoderrun function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service SIGABRT because of double free or corruption or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552...

CVE-2018-7208

In the coffpointerizeaux function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafte...

CVE-2018-7208

In the coffpointerizeaux function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafte...

DEBIAN-CVE-2018-7208

In the coffpointerizeaux function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafte...

CVE-2018-7208

In the coffpointerizeaux function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafte...

The vulnerability of the ImportOldFormatStyles function in the DOC-file analyzer of the Apache OpenOffice office package allows a hacker to execute arbitrary code.

The vulnerability of the ImportOldFormatStyles function in the DOC-file analyzer of the Apache OpenOffice office package is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code usi...

CVE-2017-17289

Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a memory leak vulnerability. The software does not release allocated memory properly...

Hawtio: Unrestricted file upload leads to RCE

It was found that a flaw in hawtio could cause remote code execution via file upload. An attacker could use this vulnerability to upload crafted file which could be executed on a target machine where hawtio is deployed...

Microsoft Outlook Memory Corruption Vulnerability

Microsoft Outlook, etc. are all products of the United States Microsoft Microsoft Corporation.Microsoft Outlook is a set of Office suite of e-mail client software.Office Click-to-Run C2R is a set of office software suite products. A remote code execution vulnerability exists in Microsoft Office...

Debian DLA-1281-1 : advancecomp security update

Joonun Jang discovered that the advzip tool in advancecomp, a collection of recompression utilities, was prone to a heap-based buffer overflow. This might allow an attacker to cause a denial of service application crash or other unspecified impact via a crafted file. For Debian 7 'Wheezy', these...

Microsoft Office Memory Corruption Vulnerability (CNVD-2018-03530)

Microsoft Office is a series of office software suite products released by Microsoft Corporation in the U.S. Office Word Viewer is a Word file viewer. A remote code execution vulnerability exists in Microsoft Office, which arises from the program's failure to properly handle objects in memory. A...

Microsoft StructuredQuery Remote Code Execution (CVE-2018-0825)

A remote code execution vulnerability exists in Microsoft StructuredQuery. The vulnerability is due to a failure of the software to properly handle objects in memory. A remote attacker can exploit this vulnerability by enticing a target victim to open a specially crafted file...

CCN-lite Infinite Recursion Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. An infinite recursion vulnerability exists in ccn-lite-ccnb2xml in versions of CCN-lite prior to 2.0.0. An attacker can exploit this vulnerability via a specially crafted file to trigger...

The vulnerability of the Android operating system’s libutils library, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s libutils library is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of a privileged process, using a specially crafted file...

The vulnerability of the Bluetooth component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a perpetrator to execute arbitrary code within the context of a privileged process using a specially crafted file...

The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...

CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file...

CVE-2017-12412

ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...

CVE-2017-12412

ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted file, which triggers infinite recursion and a stack overflow...

gifsicle 'read_gif' function double release vulnerability

gifsicle is an open source tool for creating, editing and optimizing GIF images. A double-release vulnerability exists in the 'readgif' function of the gifread.c file in gifsicle version 1.90, which stems from the program's failure to handle lastname correctly.A remote attacker can exploit this...