CVE-2016-6237

The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...

CVE-2016-6237

The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...

CVE-2016-6236

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file...

CVE-2016-6235

The CVE-2016-6235 issue affects Dropbox Lepton 1.0’s setup_imginfo_jpg function in lepton/jpgcoder.cc. A crafted JPEG can trigger a segmentation fault, causing a denial of service. The vulnerability is triggered remotely via a crafted file, with the documented impact being DoS (segmentation fault...

CVE-2016-6238

The writeujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds read via a crafted jpeg file...

CVE-2016-6235

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...

PT-2017-8938

Name of the Vulnerable Software and Affected Versions Dropbox lepton version 1.0 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by providing a crafted jpeg file. This is due to a problem in the setup imginfo jpg function located in...

PT-2017-8939

Name of the Vulnerable Software and Affected Versions Dropbox lepton version 1.0 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file. This is due to a problem in the setup imginfo jpg function in lepton/jpgcoder.cc. Recommendations...

PT-2017-8937

Name of the Vulnerable Software and Affected Versions Dropbox lepton version 1.0 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing a crafted jpeg file. This is due to a problem in the process file function located in lepton/jpgcoder.cc...

PT-2017-8941

Name of the Vulnerable Software and Affected Versions Dropbox lepton version 1.0 Description The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file. This is due to a problem in the write ujpg function in lepton/jpgcoder.cc. Recommendations For...

PT-2017-8940

Name of the Vulnerable Software and Affected Versions Dropbox lepton version 1.0 Description The issue allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file. This is due to a problem in the build huffcodes function in lepton/jpgcoder.cc. Recommendations Fo...

CVE-2016-6238: Out-of-bounds Read

The writeujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds read via a crafted jpeg file...

CVE-2016-6237: Out-of-bounds Write

The buildhuffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service out-of-bounds write via a crafted jpeg file...

CVE-2016-6236: Out-of-bounds Read

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted jpeg file...

CVE-2016-6235: Undefined Security Weakness

The setupimginfojpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service segmentation fault via a crafted jpeg file...

CVE-2016-6234: Improper Input Validation

The processfile function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service crash via a crafted jpeg file...

Dropbox Paper Beta - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dropbox Paper Beta published at the 'play' market has multiple vulnerabilities...

A text message to let the other iPhone's Message app crashes(attached to the PoC and solution)-vulnerability warning-the black bar safety net

! The researchers said they found a can let the iPhone device, the Message application crash message, affecting iOS8-iOS 10.2.1 it. First look at the demo. Do not try so do it! If you want to test your iPhone at your own risk 1.下载文件vincedes3.com/vincedes3.vcf 2. Upload to iCloud Drive, Dropbox,...

WordPress Restore Dropbox plugin <= 1.4.7 - PHP Object Injection Vulnerability

WordPress Restore Dropbox plugin allows a possible PHP Object Injection vulnerability in wpadmunpack function. Solution Update the plugin...

WordPress Backup & Restore Dropbox plugin <= 1.4.7 - Authenticated Information Disclosure Vulnerability

WordPress Restore Dropbox plugin has a PHP object injection vulnerability. The plugin’s admin functions are accessible to any logged in user. Solution Update the plugin...