7507 matches found
jasper: integer overflows leading to out of bounds read in packet iterators in JPC decoder
An out-of-bounds heap read vulnerability was found in the jpcpinextpcrl function of jasper before 2.0.6 when processing crafted input...
EulerOS 2.0 SP2 : gstreamer1-plugins-good (EulerOS-SA-2017-1065)
According to the versions of the gstreamer1-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10...
EulerOS 2.0 SP1 : gstreamer1-plugins-good (EulerOS-SA-2017-1064)
According to the versions of the gstreamer1-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10...
EulerOS 2.0 SP1 : gstreamer-plugins-good (EulerOS-SA-2017-1062)
According to the versions of the gstreamer-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10....
EulerOS 2.0 SP2 : gstreamer-plugins-good (EulerOS-SA-2017-1063)
According to the versions of the gstreamer-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in the flxdecodedeltafli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10....
EulerOS 2.0 SP1 : kernel (EulerOS-SA-2016-1026)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the Linux kernel KVM subsystem's sysenter instruction emulation was not sufficient. An unprivileged guest user could use this...
QEMU Code Injection Vulnerability
QEMU aka Quick Emulator is a suite of analog processor software developed by French programmer Fabrice Bellard. A code injection vulnerability exists in QEMU versions prior to 2.9.0. Since the disasinsn function in target/i386/translate.c does not limit the size of instructions, an attacker could...
ALPINE-CVE-2017-8105
FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...
openSUSE Security Update : mozilla-nss (openSUSE-2017-504)
Mozilla-nss was updated to 3.28.4 to fix the following issues : Security issues : - CVE-2016-9574: Allow use of session tickets when there is no ticket wrapping key boo1015499, bmo1320695 Non security issues : - A rare crash when initializing an SSL socket fails has been fixed bmo1342358 - Rare...
CVE-2016-7534
The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...
CVE-2016-7525
Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted PSD file...
CVE-2016-7534
The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...
Out-of-bounds
The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...
CVE-2016-7534
The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...
CVE-2016-7534
The generic decoder in ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted file...
CVE-2016-7534
CVE-2016-7534 — ImageMagick’s generic decoder allows remote attackers to cause a denial of service via a crafted file, by triggering out-of-bounds access. Public details in the provided documents confirm the vulnerability class and impact as described by NVD, but no vendor/product version scope o...
FFmpeg 'decode_frame_common' function heap buffer overflow vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A heap buffer overflow vulnerability exists in the 'decodeframecommon' function in the libavcodec/pngdec.c file in FFmpeg. An attacker can exploit this vulnerability to cause a denial of...
DEBIAN-CVE-2017-7975
Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2buildhuffmantable function in jbig2huffman.c during operations on a crafted JBIG2 file, leading to a denial of service application crash or possibly execution of arbitrary code...