DEBIAN-CVE-2017-9847

The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

Microsoft Malware Protection Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSyste...

SUSE-SU-2017:1600-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: This security issue was fixed: - CVE-2017-7941: The ReadSGIImage function in sgi.c allowed remote attackers to consume an amount of available memory via a crafted file bsc1034876. - CVE-2017-8351: ImageMagick, GraphicsMagick: denial of...

DEBIAN-CVE-2017-9744

The shelfsetmachfromflags function in bfd/elf32-sh.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted binary...

CVE-2017-9670

An uninitialized stack variable vulnerability in loadticseries in set.c in gnuplot 5.2.rc1 allows an attacker to cause Denial of Service Segmentation fault and Memory Corruption or possibly have unspecified other impact when a victim opens a specially crafted file...

PT-2017-19106 · Gnu +1 · Gnuplot +1

Name of the Vulnerable Software and Affected Versions: gnuplot version 5.2.rc1 Description: The issue is related to an uninitialized stack variable vulnerability in the load tic series function in set.c. This vulnerability can be exploited when a victim opens a specially crafted file, potentially...

openSUSE Security Update : ImageMagick (openSUSE-2017-686)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2017-6502: Possible file-descriptor leak in libmagickcore that could be triggered via a specially crafted webp file bsc1028075. - CVE-2017-7943: The ReadSVGImage function in svg.c allowed remote attackers to...

Updated catdoc packages fix security vulnerability

Various issues found during fuzzing which may lead to an application crash or have unspecified further impact when the user is tricked into opening specially crafted files boo919228. A lot of segfaults on incorrect or corrupted data...

UBUNTU-CVE-2017-0637

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

Google Android Media framework remote code execution vulnerability (CNVD-2017-09309)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android. A remote attacker can exploit th...

YARA Denial of Service Vulnerability (CNVD-2017-11330)

YARA is a set of tools used to help software researchers identify and categorize malware samples. A denial of service vulnerability exists in the 'yrarenawritedata' function in YARA version 3.6.1. A remote attacker can exploit this vulnerability with the help of specially crafted files to cause a...

Google Android Media framework remote code execution vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android. A remote attacker can exploit th...

Google Android Media framework remote code execution vulnerability (CNVD-2017-09306)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android. A remote attacker can exploit th...

Google Android Media framework remote code execution vulnerability (CNVD-2017-09310)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android. A remote attacker can exploit th...

Google Android System UI Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short. System UI is the system interface that comes with Android. A remote code execution vulnerability exists in System UI in Android versions 7.1.1 and 7.1.2. A remote attack...

Google Android Media framework remote code execution vulnerability (CNVD-2017-09308)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android. A remote attacker can exploit th...

CVE-2017-9501

In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file...

SUSE-SU-2017:1489-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-6502: Possible file-descriptor leak in libmagickcore that could be triggered via a specially crafted webp file bsc1028075. - CVE-2017-7943: The ReadSVGImage function in svg.c allowed remote attackers to...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file. Remediation A fix was pushed into the master...

Microsoft Malware Protection Engine Denial of Service Vulnerability (CNVD-2017-09497)

Microsoft Windows is a series of operating systems released by Microsoft, Microsoft Forefront is a set of enterprise-oriented server security features applied to it.Microsoft Defender is an antivirus software applied to it. An engine denial of service vulnerability exists in Microsoft Forefront a...