CVE-2022-38229

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

CVE-2022-35104

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset at /xpdf/Stream.cc...

UBUNTU-CVE-2022-38235

XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF suffers from a buffer error vulnerability that stems from DCTStream::transformDataUnit in /xpdf/Stream.cc contains a heap buffer overflow...

XPDF 安全漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a security vulnerability that originates from DCTStream::decodeImage in /xpdf/Stream.cc contains a floating point exception FPE...

PT-2022-24301 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF via the getChar function in DCTStream at /xpdf/Stream.cc. Recommendations: At the moment, there is no information about a newer version that...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6153490086363136 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

Modesty Pdf2json 代码问题漏洞

Modesty Pdf2json is a Java-based code library from Modesty's personal developer that allows PDF files to interact with Json files. PDF2JSON version 0.70 has a security vulnerability that stems from an issue found in the function DCTStream::getChar, which could be used by an attacker to cause a...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in idctSparseColPut_int16_8bit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6190960292790272 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in p8idct

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4704307963363328 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

CVE-2020-8759

Improper access control in the installer for IntelR SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8759

Improper access control in the installer for IntelR SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8759

Improper access control in the installer for IntelR SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the installer for IntelR SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8759

Improper access control in the installer for IntelR SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8759

CVE-2020-8759 : The Intel® SSD Data Center Tool (DCT) installer contains an improper access control vulnerability that could allow a privileged local user to escalate privileges. The issue affects Intel® SSD DCT before version 3.0.23. Intel’s advisory recommends updating to version 3.0.23 or late...

CVE-2020-8759: Undefined Security Weakness

Improper access control in the installer for IntelR SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2020-4355

Name of the Vulnerable Software and Affected Versions: IntelR SSD DCT versions prior to 3.0.23 Description: The issue is related to improper access control in the installer, which may allow a privileged user to potentially enable escalation of privilege via local access. This is due to errors in...

Intel® SSD DCT Advisory

Summary: A potential security vulnerability in the Intel® SSD Data Center Tool DCT may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8759 Description: Improper access control in the installer for...

Design/Logic Flaw

The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted JPEG data...