3628 matches found
Denial of service
imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service divide-by-zero error via a crafted image, related to imagew-api.c...
CVE-2017-9201
CVE-2017-9201 affects ImageWorsener 1.3.1, specifically the imagew-cmd.c:850:46 path in libimageworsener.a (ImageWorsener) with a crafted image triggering a denial of service. The flaw is related to imagew-api.c. Documented impact is a denial of service via a divide-by-zero error. Exploitation de...
CVE-2017-9201
imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service divide-by-zero error via a crafted image, related to imagew-api.c...
CVE-2017-9202
The CVE-2017-9202 issue affects ImageWorsener 1.3.1: imagew-cmd.c:854:45 in libimageworsener.a, related to imagew-api.c. A crafted image can trigger a divide-by-zero error, allowing remote denial of service. Documents confirm the vulnerable file and location, the affected version, and the DoS out...
Ubuntu 14.04 LTS / 16.04 LTS : Ghostscript regression (USN-3272-2)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3272-2 advisory. USN-3272-1 fixed vulnerabilities in Ghostscript. This change introduced a regression when the DELAYBIND feature is used with the eqproc command. This...
USN-3272-2 ghostscript regression
USN-3272-1 fixed vulnerabilities in Ghostscript. This change introduced a regression when the DELAYBIND feature is used with the eqproc command. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ghostscript improperly handled...
SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2017:1241-1)
This update for qemu fixes several issues. These security issues were fixed : - CVE-2017-2620: In CIRRUSBLTMODEMEMSYSSRC mode the bitblit copy routine cirrusbitbltcputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation bsc1024972 -...
jasper: missing SIZ marker segment XRsiz and YRsiz fields range check
The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...
CVE-2017-8842
The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...
CVE-2017-8842
The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...
UBUNTU-CVE-2017-8842
The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...
CVE-2017-8842
CVE-2017-8842 affects lrzip (Long Range ZIP), specifically the liblrzip/libzpaq.h path in lrzip 0.631. The root cause is the bufRead::get() function, which can be triggered by a crafted archive to cause a denial of service via a divide-by-zero error, leading to an application crash. Exploitation ...
CVE-2017-8842
The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...
Fedora 25 : ghostscript (2017-c85c0e5637)
Security fixes release for these CVEs : - CVE-2016-10217 use-after-free and application crash - CVE-2016-10218 NULL pointer dereference and application crash - CVE-2016-10219 divide-by-zero error and application crash - CVE-2016-10220 NULL pointer dereference and application crash - CVE-2017-5951...
SUSE SLES11 Security Update : audiofile (SUSE-SU-2017:1182-1)
This update for audiofile fixes the following issues: Security issues fixed : - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients MSADPCM.cpp bsc1026979 - CVE-2017-6828: heap-based buffer overflow in readValue FileHandle.cpp bsc1026980 - CVE-2017-6829: global buffer...
PT-2017-18572 · Lrzip · Lrzip
Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue is related to a divide-by-zero error and application crash that can be triggered by remote attackers via a crafted archive. This is caused by the bufRead::get function in libzpaq/libzpaq.h in...
SUSE-SU-2017:1182-1 Security update for audiofile
This update for audiofile fixes the following issues: Security issues fixed: - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients MSADPCM.cpp bsc1026979 - CVE-2017-6828: heap-based buffer overflow in readValue FileHandle.cpp bsc1026980 - CVE-2017-6829: global buffer...
USN-3272-1 ghostscript vulnerabilities
It was discovered that Ghostscript improperly handled parameters to the rsdparams and eqproc commands. An attacker could use these to craft a malicious document that could disable -dSAFER protections, thereby allowing the execution of arbitrary code, or cause a denial of service application crash...
