Cisco Snort++ Protocol Decoder Denial of Service Vulnerabilities

Two vulnerabilities in the protocol decoders of Snort++ Snort 3 could allow an unauthenticated, remote attacker to create a Denial of Service DoS condition. The vulnerabilities are due to lack of validation in the protocol decoders. An attacker could exploit these vulnerabilities by crafting a...

MsMpEng: UIF decoder will spin forever processing sparse blocks

The UIF Universal Image Format is a proprietary file format used by the old shareware utility MagicISO. Microsoft have a dedicated unpacker for UIF that runs as SYSTEM on all filesystem activity !?!. The UIF format has an index structure at a fixed offset from the end of the file, with a pointer ...

jasper: integer overflows leading to out of bounds read in packet iterators in JPC decoder

An out-of-bounds heap read vulnerability was found in the jpcpinextpcrl function of jasper before 2.0.6 when processing crafted input...

EulerOS 2.0 SP1 : gstreamer1-plugins-good (EulerOS-SA-2017-1064)

According to the versions of the gstreamer1-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10...

EulerOS 2.0 SP2 : gstreamer1-plugins-good (EulerOS-SA-2017-1065)

According to the versions of the gstreamer1-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10...

EulerOS 2.0 SP1 : gstreamer-plugins-good (EulerOS-SA-2017-1062)

According to the versions of the gstreamer-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10....

EulerOS 2.0 SP2 : gstreamer-plugins-good (EulerOS-SA-2017-1063)

According to the versions of the gstreamer-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10....

EulerOS 2.0 SP1 : kernel (EulerOS-SA-2016-1026)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the Linux kernel KVM subsystem's sysenter instruction emulation was not sufficient. An unprivileged guest user could use this...

QEMU Code Injection Vulnerability

QEMU aka Quick Emulator is a suite of analog processor software developed by French programmer Fabrice Bellard. A code injection vulnerability exists in QEMU versions prior to 2.9.0. Since the disasinsn function in target/i386/translate.c does not limit the size of instructions, an attacker could...

ALPINE-CVE-2017-8105

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...

openSUSE Security Update : mozilla-nss (openSUSE-2017-504)

Mozilla-nss was updated to 3.28.4 to fix the following issues : Security issues : - CVE-2016-9574: Allow use of session tickets when there is no ticket wrapping key boo1015499, bmo1320695 Non security issues : - A rare crash when initializing an SSL socket fails has been fixed bmo1342358 - Rare...

CVE-2016-7534

The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...

CVE-2016-7534

The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...

CVE-2016-7525

Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted PSD file...

Out-of-bounds

The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...

CVE-2016-7534

The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...

CVE-2016-7534

The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...

CVE-2016-7534

CVE-2016-7534 — ImageMagick’s generic decoder allows remote attackers to cause a denial of service via a crafted file, by triggering out-of-bounds access. Public details in the provided documents confirm the vulnerability class and impact as described by NVD, but no vendor/product version scope o...

FFmpeg 'decode_frame_common' function heap buffer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A heap buffer overflow vulnerability exists in the 'decodeframecommon' function in the libavcodec/pngdec.c file in FFmpeg. An attacker can exploit this vulnerability to cause a denial of...

DEBIAN-CVE-2017-7975

Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2buildhuffmantable function in jbig2huffman.c during operations on a crafted JBIG2 file, leading to a denial of service application crash or possibly execution of arbitrary code...