LibTIFF Divide by Zero Error Denial of Service Vulnerability

LibTiff is an application library responsible for encoding/decoding TIFF image format. The use of the LibTiff library's "tiffdither" tool to process malformed TIFF images suffers from a divide-by-zero error, which can be exploited to build a malicious application and trick the application into...

CVE-2014-9638

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

AZL-7400 CVE-2014-9638 affecting package vorbis-tools for versions less than 1.4.0-35

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

Design/Logic Flaw

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

CVE-2014-9638: Undefined Security Weakness

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service divide-by-zero error and crash via a WAV file with the number of channels set to zero...

PT-2015-4316

Name of the Vulnerable Software and Affected Versions vorbis-tools version 1.4.0 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and crash, via a WAV file with the number of channels set to zero. Recommendations For vorbis-tools...

[ MDVSA-2015:024 ] libsndfile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:024 http://www.mandriva.com/en/support/security/ Package : libsndfile Date : January 15, 2015 Affected: Business Server 1.0 Problem Description: Updated libsndfile packages fix security vulnerabilities:...

Mandriva Linux Security Advisory : libsndfile (MDVSA-2015:024)

Updated libsndfile packages fix security vulnerabilities : libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user-supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service CVE-2014-9496...

MGASA-2015-0015 Updated libsndfile packages fix CVE-2014-9496

Updated libsndfile packages fix security vulnerabilities: libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service CVE-2014-9496...

Updated libsndfile packages fix CVE-2014-9496

Updated libsndfile packages fix security vulnerabilities: libsndfile contains multiple buffer-overflow vulnerabilities in src/sd2.c because it fails to properly bounds-check user supplied input, which may allow an attacker to execute arbitrary code or cause a denial of service CVE-2014-9496...

PT-2014-8421

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.3 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted TIFF image. This is due to the TIFFmalloc function not rejecting a zero...

CVE-2014-8130

The TIFFmalloc function in tifunix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tifwrite.c, as demonstrated by...

libsndfile 'file_io.c' Divide-By-Zero Denial of Service Vulnerability

libsndfile is a C library for reading and writing sound files such as AIFF, AU and WAV through a standard interface. A denial of service vulnerability exists in libsndfile 'fileio.c' Divide-By-Zero, which allows an attacker to exploit the vulnerability to crash the affected application and deny...

CentOS Update for libvncserver CESA-2014:1826 centos7

Check the version of libvncserver SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882081";...

Scientific Linux Security Update : libvncserver on SL6.x, SL7.x i386/x86_64 (20141111)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way screen sizes were handled by LibVNCServer. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code in the client. CVE-2014-6051 A NULL pointer dereference...

Scientific Linux Security Update : kdenetwork on SL7.x x86_64 (20141111)

A NULL pointer dereference flaw was found in the way LibVNCServer handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client. CVE-2014-6053 A divide-by-zero flaw was found in the way...

RedHat Update for libvncserver RHSA-2014:1826-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for libvncserver CESA-2014:1826 centos6

Check the version of libvncserver SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882078";...

RHEL 6 / 7 : libvncserver (RHSA-2014:1826)

Updated libvncserver packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

RHEL 7 : kdenetwork (RHSA-2014:1827)

Updated kdenetwork packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...