graphite2: heap-buffer-overflow write "lz4::decompress" (CVE-2017-7772)

A heap-based buffer overflow flaw related to "lz4::decompress" has been reported in graphite2. An attacker could exploit this issue to cause a crash or, possibly, execute arbitrary code...

CVE-2017-7772

A heap-based buffer overflow flaw related to "lz4::decompress" has been reported in graphite2. An attacker could exploit this issue to cause a crash or, possibly, execute arbitrary code...

CVE-2017-7773

Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...

CVE-2017-7772

Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function...

ytnef denial of service vulnerability (CNVD-2017-09343)

ytnef is an application library for extracting data from winmail.dat files. A denial of service vulnerability exists in the 'DecompressRTF' function in the lib/ytnef.c file in ytnef version 1.9.2. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer...

PT-2017-3741

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 54 Description: The issue is related to a heap-based buffer overflow in the Graphite2 library, specifically in the lz4::decompress function. This can lead to a buffer overflow read in the graphite2::Silf::readGraphit...

PT-2017-3742

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions prior to 1.3.10 Mozilla Firefox versions prior to 54 Mozilla Firefox ESR versions prior to 52.2 Thunderbird versions prior to 52.2 Description: The issue is related to the lz4::decompress function in the Graphite 2 library...

PT-2017-3740

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions prior to 54 Mozilla Firefox versions prior to 54 Mozilla Firefox ESR versions prior to 54 Description: The issue is caused by a heap-based buffer overflow in the lz4::decompress function of the Graphite 2 library. This can...

DEBIAN-CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

Wireshark Network Protocol Analyzer Compromise

A vulnerability exists in the SnifferDecompress function in the wireshark/Wireshark DOS Sniffer processing tool, due to the possibility of data overwriting during copying. Exploiting this vulnerability allows malicious actors operating remotely to cause a service failure abrupt termination of the...

Wireshark Network Protocol Analyzer Compromise

A vulnerability exists in the SnifferDecompress function in the wireshark/Wireshark DOS sniffer processing module, located in the wiretap/ngsniffer.c file. This vulnerability arises due to improper handling of empty input data. Exploiting this vulnerability allows malicious individuals operating...

PT-2016-3293

Name of the Vulnerable Software and Affected Versions bzip2 versions 1.0.6 and earlier Description The issue is related to an out-of-bounds write in the BZ2 decompress function in decompress.c when there are many selectors. This can lead to memory corruption, resulting in a denial of service and/...

PT-2018-3362

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to a Heap-Based Buffer Overflow in the zgfx decompress function, which can cause memory corruption and potentially allow for remote code execution. The vulnerability can be...

PT-2018-3040

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is caused by an Integer Overflow in the gdi Bitmap Decompress function, leading to a Heap-Based Buffer Overflow. This results in memory corruption and potentially allows for remote code...

PT-2018-3363

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to a Heap-Based Buffer Overflow in the zgfx decompress segment function, which can cause memory corruption and potentially allow for remote code execution. The vulnerabilit...

Adobe Flash - SimpleButton Creation Type Confusion

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=640 There is a type confusion vulnerability in the SimpleButton constructor. Flash stores an empty button to use to create buttons for optimization reasons. If this obje...

PT-2015-3405

Name of the Vulnerable Software and Affected Versions BusyBox versions prior to 1.27.2 Description The issue is related to the huft build function in the archival/libarchive/decompress gunzip.c component of the BusyBox set of UNIX utilities. It involves a null pointer dereference. An attacker,...

UBUNTU-CVE-2015-4471

Off-by-one error in the lzxddecompress function in lzxd.c in libmspack before 0.5 allows remote attackers to cause a denial of service buffer under-read and application crash via a crafted CAB archive...

PT-2015-6602

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.5 Description The issue is caused by an off-by-one error in the lzxd decompress function, which can lead to a denial of service due to a buffer under-read and application crash. This can be triggered by remote...

PT-2015-4271

Name of the Vulnerable Software and Affected Versions libmspack version 0.4 Description The issue is caused by an integer overflow in the qtmd decompress function, which allows remote attackers to cause a denial of service via a crafted CAB file. This triggers an infinite loop. Recommendations Fo...