CVE-2017-12450

The alphavmsobjectp function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file...

CVE-2017-12983

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-12983

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2017-12983

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

CVE-2017-12983

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

UnRAR 'Unpack::LongLZ' Function Buffer Overflow Vulnerability

UnRAR is a command line document decompression program for use on Windows and Linux platforms. A buffer overflow vulnerability in the 'Unpack::LongLZ' function of the UnRAR libunrar.a file allows remote attackers to exploit the vulnerability to construct a malicious file that can be parsed by the...

CVE-2017-12966

The asn1flookupsymbolimpl function in asn1fixretrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service segmentation fault via a crafted .asn1 file...

Code injection

The asn1flookupsymbolimpl function in asn1fixretrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service segmentation fault via a crafted .asn1 file...

CVE-2017-12427

The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service memory leak via a crafted file, related to the WriteMSLImage function...

CVE-2017-11662

The WMParseNewMidi function in fmidi.c in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

CVE-2017-11664

The WMSetupMidiEvent function in internalmidi.c:2122 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

CVE-2017-11664

The WMSetupMidiEvent function in internalmidi.c:2122 in WildMIDI 0.4.2 can cause a denial of service invalid memory read and application crash via a crafted mid file...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2017:2176-1)

This update for ImageMagick fixes the following issues: Security issues fixed : - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c bsc1042826 - CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file bsc1043289 - CVE-2017-11403:...

Ffmpeg Null Pointer Reference Remote Denial of Service Vulnerability

FFmpeg is a free program that performs recording, transferring and streaming of audio and video in various formats. FFmpeg suffers from a null pointer reference remote denial of service vulnerability that could be exploited by an attacker to submit a special file that could be parsed by the user,...

Command injection

Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents...

[ASA-201708-10] libytnef: arbitrary code execution

Arch Linux Security Advisory ASA-201708-10 ========================================== Severity: High Date : 2017-08-14 CVE-ID : CVE-2017-9058 Package : libytnef Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-275 Summary ======= The package libytnef before...

SIMPlight SCADA Software DLL Load Local Code Execution Vulnerability

SIMPlight SCADA is software for building management systems and automation equipment. SIMPlight SCADA Software suffers from a DLL Load Native Code Execution vulnerability that could be exploited by an attacker to submit a special file to trick a user into requesting and elevating privileges...

The vulnerability of the ReadOneMNGImage function in the console-based ImageMagick graphics editor allows a hacker to cause a service failure.

The vulnerability of the ReadOneMNGImage function in the console-based ImageMagick graphics editor is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure resource consumption by the computer. Th...

The vulnerability of the ReadTXTImage function in the console-based ImageMagick graphics editor allows a hacker to cause a service failure.

The vulnerability of the ReadTXTImage function in the console-based ImageMagick graphics editor is related to insufficient checking for the file end condition. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure an infinite loop using a specially...

The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure memory consumption through a specially...