Apple macOS Sierra Foundation Component Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Foundation is one of the components that defines the Objective-C class base layer. A memory corruption vulnerability exists in the Foundation component in Apple macOS Sierra versions prior to 10.12.6. A remo...

CVE-2017-8588

Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it parses specially crafted files, aka...

PT-2017-2471 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2007 through 2016 Description: A remote code execution issue exists due to the way Microsoft Office handles objects in memory. This could allow a remote attacker to execute arbitrary code by using a specially crafted...

Vim Denial of Service Vulnerability

Vim is an open-source, configurable text editor for creating and changing any type of text, which can be used on most UNIX systems and Apple OS X. It can be used to create and change any type of text. A security vulnerability exists in Vim version 8.0. The vulnerability can be exploited by an...

SWFTools on Windows png2swf buffer overflow vulnerability (CNVD-2017-13991)

SWFTools on Windows is a Windows-based utility toolset for working with Adobe Flash files SWF files. png2swf is one of the file format conversion components. A buffer overflow vulnerability exists in png2swf in SWFTools 2013-04-09-1007 on Windows. A remote attacker can exploit this vulnerability ...

STDU Viewer Buffer Overflow Vulnerability

STDU Viewer is a free file viewer that supports multiple formats. The program supports TIFF, PDF, DjVu, XPS and WWF formats. A security vulnerability exists in STDU Viewer version 1.6.375. An attacker can exploit this vulnerability to execute code with the help of specially crafted files...

IrfanView FPX plugin buffer overflow vulnerability (CNVD-2017-15684)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in IrfanView...

IrfanView buffer overflow vulnerability (CNVD-2017-14207)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability with the help of specially crafted...

IrfanView buffer overflow vulnerability (CNVD-2017-14206)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability with the help of specially crafted...

The vulnerability of the Surfaceflinger service in the Android operating system allows a hacker to cause memory corruption during the reading of media files or other data.

The vulnerability of the Surfaceflinger service in the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code through a specially created file, which can cause memory...

IrfanView Buffer Overflow Vulnerability (CNVD-2017-14209)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause ...

IrfanView Buffer Overflow Vulnerability (CNVD-2017-14208)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause ...

IrfanView .fpx file buffer overflow vulnerability (CNVD-2017-14126)

IrfanView is an image viewer , it supports image browsing , image editing , image format conversion , etc. FPX Plugin is one of the programmable interface extension plugin . A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit using FPX Plugin version 4.46. An attacker can...

Design/Logic Flaw

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByMapping+0x0000000000000046."...

Design/Logic Flaw

STDU Viewer version 1.6.375 might allow user-assisted attackers to execute code via a crafted file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands including Ctrl-+ commands...

CVE-2017-9920

IrfanView version 4.44 32bit with TOOLS Plugin 4.50 might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpResSearchResourceInsideDirectory+0x000000000000029e."...

FFmpeg 'xwd_decode_frame' function heap buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A heap buffer overflow vulnerability exists in the 'xwddecodeframe' function in the libavcodec/xwddec.c file in FFmpeg. A remote attacker can exploit this vulnerability to cause a denial of...

libtorrent 'bdecode' function heap buffer overflow vulnerability

libtorrent is an open source C++ Bittorrent library developed by software developer Arvid Norberg, which provides high performance and good code style of the BT development kit, and supports crawling file pages directly through the network stack. A security vulnerability exists in the 'bdecode'...

PT-2017-3907 · Faad2 Team +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: FAAD2 version 2.7 Description: The issue is related to the mp4ff read stsc function, which can be exploited by remote attackers to cause a denial of service. This is achieved through a crafted mp4 file, leading to a large loop and significant...

Silicon Graphics LibTIFF 'libtiff/tif_dirread.c' Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in Silicon Graphics LibTIFF version 4.0.7, which stems from...