CVE-2017-11698

Heap-based buffer overflow in the getpage function in lib/dbm/src/hpage.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

Heap overflow

Heap-based buffer overflow in the getpage function in lib/dbm/src/hpage.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

CVE-2017-11697

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

The vulnerability of the WLAN kernel component of the Android operating system from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the WLAN kernel component of the Android operating system, found in the CAF repository, is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process, using a specially crafted file...

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially...

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...

The vulnerability of the libavc library of the Media Framework operating system Android allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the libavc library in the Media Framework component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted...

Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2018-00172)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A security vulnerability exists in the removeField method of Foxit Reader version 8.3.2.25013, which is caused by the program failing to adequately verify the existence of an object before performing an operation on...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:3388-1)

This update for ImageMagick fixes the following issues : - CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 - CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 -...

EulerOS 2.0 SP1 : binutils (EulerOS-SA-2017-1338)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The coffslurplinetable function in coffcode.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1,...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2017-37504)

Huawei AR and SRG series enterprise routers are all-in-one routers for small and medium-sized offices or branches of small and medium-sized enterprises launched by Huawei; TE series, DP300, and MAX PRESENCE are all integrated desktop smart products and high-definition videoconferencing terminals...

CVE-2017-17508

In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5Tsetloc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

Microsoft Excel Remote Code Execution (CVE-2017-11935)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

HDF5 De-Zero Vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A security vulnerability exists in the 'H5Tsetloc' function in the H5T.c file of the libhdf5.a text in HDF5 version 1.10.1. An...

HDF5 'H5Opline_pline_decode' function out-of-bounds read vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. An out-of-bounds read vulnerability exists in the 'H5Oplineplinedecode' function of the H5Opline.c file in the libhdf5.a file in...

HDF5 Null Pointer Dereference Vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A null pointer dereference vulnerability exists in the H5Opline.c file 'H5Oplinedecode' function of libhdf5.a in HDF5 version...

Design/Logic Flaw

In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5Tsetloc in the H5T.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

CVE-2017-17509

In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5Gentdecodevec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file...

UBUNTU-CVE-2017-17506

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Oplineplinedecode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...

CVE-2017-17506

In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Oplineplinedecode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...