[SECURITY] [DLA 1310-1] exempi security update

Package : exempi Version : 2.2.0-1+deb7u1 CVE ID : CVE-2017-18233 CVE-2017-18234 CVE-2017-18236 CVE-2017-18238 CVE-2018-7728 CVE-2018-7730 Various issues were discovered in exempi, a library to parse XMP metadata that may cause a denial-of-service or may have other unspecified impact via crafted...

CVE-2018-7511

In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow remote execution of arbitrary code...

Microsoft Office Information Disclosure Vulnerability (CNVD-2018-05884)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in Microsoft Office that stems from the program's failure t...

CVE-2017-16745

A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. An access of resource using incompatible type 'type confusion' vulnerability may allow an attacker to execute remote code when processing specially crafted .dpb files...

CVE-2017-16751

A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Stack-based buffer overflow vulnerabilities caused by processing specially crafted .dpb files may allow an attacker to remotely execute arbitrary code...

CVE-2017-16749

A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. Specially crafted .dpb files could exploit a use-after-free vulnerability...

GraphicsMagick 1.3.26 Multiple DoS Vulnerabilities - Linux

GraphicsMagick is prone to multiple Denial of Service vulnerabilities, exploitable via specially crafted files. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DEBIAN-CVE-2017-18229

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

CVE-2017-18229

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

Eaton ELCSoft Arbitrary Code Execution Vulnerability

Eaton ELCSoft is programmable logic control software that runs on a PC and helps configure ELC controllers. An arbitrary code execution vulnerability exists in Eaton ELCSoft 2.04.02 and earlier versions, where there are multiple scenarios where a specially crafted file could result in a buffer...

UBUNTU-CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

CVE-2017-18199

A NULL pointer dereference flaw was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files...

CVE-2017-18201

A double-free flaw was found in the way libcdio handled processing of ISO files. An attacker could potentially use this flaw to crash applications using libcdio by tricking them into processing crafted ISO files...

SumatraPDF Reader Memory Misreference Vulnerability

SumatraPDF Reader is a free software to view PDF files. A memory misreference vulnerability exists in version 2.x of SumatraPDF Reader prior to 2.2.1. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of specially crafted PDF files...

Artifex Software Ghostscript 'pdf14_pop_transparency_group' Function Denial of Service Vulnerability

Artifex Software Ghostscript is an open source PostScript parser from Artifex Software, which displays Postscript files and prints them on non-Postscript printers. Artifex Software Ghostscript 9.20 version of the PDF Transparency module of the base/gdevp14.c file 'pdf14poptransparencygroup'...

Artifex Software Ghostscript 'pdf14_open' Function Denial of Service Vulnerability

Artifex Software Ghostscript is an open source PostScript parser from Artifex Software, which displays Postscript files and prints them on non-Postscript printers. A security vulnerability exists in the 'pdf14open' function in the base/gdevp14.c file in Artifex Software Ghostscript version 9.20. ...

UBUNTU-CVE-2018-7339

The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote attackers to cause a denial of service overflow, insufficient memory allocation, and segmentation fault or possibly have unspecified other impact via a crafte...

WavPack ParseCaffHeaderConfig Function Denial of Service Vulnerability

WavPack is a free, open-source lossless audio compression format developed by David Bryant, with a .wv file extension. A denial of service vulnerability exists in the ParseCaffHeaderConfig function of the cli/caff.c file in WavPack 5.1.0. This allows remote attackers to exploit the vulnerability ...

CVE-2017-18189

A NULL pointer dereference flaw found in the way SoX handled processing of AIFF files. An attacker could potentially use this flaw to crash the SoX application by tricking it into processing crafted AIFF files...

CVE-2017-15346

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00, V200R002C00, V200R003C00, V200R005C00,...