UBUNTU-CVE-2016-10052

Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

DEBIAN-CVE-2016-10052

Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

pngdefry 'pngdefry.c' heap buffer overflow vulnerability

pngdefry is a suite of applications for iPhone and iPad to modify PNG images. A heap buffer overflow vulnerability exists in pngdefry 2017-03-22 and earlier versions. Due to the program failing to properly handle specially crafted png files. An attacker could exploit the vulnerability to cause a...

ImageMagick magick/colormap-private.h file denial of service vulnerability

ImageMagick is a set of open source image processing software. A security vulnerability exists in the ImageMagick magick/colormap-private.h file. An attacker can exploit the vulnerability to submit a special file that will trick the application into parsing it, crashing the application...

UBUNTU-CVE-2017-7210

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

AZL-7177 CVE-2017-6834 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the ulaw2linearbuf function in G711.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

AZL-36923 CVE-2017-6831 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

AZL-7174 CVE-2017-6831 affecting package audiofile 0.3.6-27

Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...

DEBIAN-CVE-2017-6835

The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library aka audiofile 0.3.6 allows remote attackers to cause a denial of service divide-by-zero error and crash via a crafted file...

CVE-2017-6832

CVE-2017-6832 affects Audio File Library (audiofile) up to version 0.3.6, with a heap-based buffer overflow in MSADPCM.cpp:decodeBlock that can cause a remote crash via a crafted file (denial of service). Public advisories confirm multiple vendors released fixes (e.g., Debian DSA/SEC, ALAS/Cloud ...

PT-2017-7826 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: MuPDF versions prior to 1.10 Description: The issue is related to a buffer overflow in the my getline function in jstest main.c in Mujstest, which allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...

The vulnerability of the Android operating system, which allows a hacker to trigger memory corruption

The vulnerability of the Mediaserver application in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption during the processing of media files and data using a specially...

DEBIAN-CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

DEBIAN-CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read. The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file. Remediation There is no fixed version for podofo...

UBUNTU-CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

PT-2017-17376 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.4 Description: The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted file. This is related to the PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp...

PT-2017-17368 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: The issue concerns a denial of service caused by a NULL pointer dereference in the GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function, located in graphicsstack.h. This can be triggered by...

Microsoft Office Memory Corruption (MS17-014: CVE-2017-0031)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

UBUNTU-CVE-2017-6832

Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library aka audiofile 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service crash via a crafted file...