CVE-2017-14056

CVE-2017-14056 affects FFmpeg 3.3.3 in libavformat/rl2.c: rl2_read_header() lacks an End-of-File check for crafted RL2 files claiming a large frame_count, leading to loops that can exhaust CPU and memory. Impact: potential remote DoS via heavy resource consumption when parsing malicious RL2 strea...

CVE-2017-11523

The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service infinite loop via a crafted file, because the end-of-file condition is not considered...

Design/Logic Flaw

The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service infinite loop via a crafted file, because the end-of-file condition is not considered...

UBUNTU-CVE-2017-11523

The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service infinite loop via a crafted file, because the end-of-file condition is not considered...

CVE-2017-11523

The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service infinite loop via a crafted file, because the end-of-file condition is not considered...

The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick allows a hacker to cause a system to run out of resources due to the central processor.

The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the central processor’s resources to be exhausted by using a specially...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. CVE-2017-11352 was not correctly fixed, allowing attackers to crash an application. The crash is as a result of incorrect handling of End of File EOF handling...

DEBIAN-CVE-2017-11188

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...

UBUNTU-CVE-2017-11188

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be triggered by running a RLE image through coders/rle.c and leveraging a flaw in the end of file handling...

DEBIAN-CVE-2017-9144

In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...

UBUNTU-CVE-2017-9144

In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...

FreeBSD : asterisk -- Memory exhaustion on short SCCP packets (fab87bff-3ce5-11e7-bf9d-001999f8d30b)

The Asterisk project reports : A remote memory exhaustion can be triggered by sending an SCCP packet to Asterisk system with 'chanskinny' enabled that is larger than the length of the SCCP header but smaller than the packet length specified in the header. The loop that reads the rest of the packe...

UBUNTU-CVE-2017-7223

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

DEBIAN-CVE-2017-7223

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...

jsoup: XSS vulnerability related to incomplete tags at EOF

It was found that jsoup did not properly validate user-supplied HTML content; certain HTML snippets could get past the validator without being detected as unsafe. A remote attacker could use a specially crafted HTML snippet to execute arbitrary web script in the user's browser...

jsoup: XSS vulnerability related to incomplete tags at EOF

It was found that jsoup did not properly validate user-supplied HTML content; certain HTML snippets could get past the validator without being detected as unsafe. A remote attacker could use a specially crafted HTML snippet to execute arbitrary web script in the user's browser...

DEBIAN-CVE-2015-2754

FreeXL before 1.0.0i allows remote attackers to cause a denial of service stack corruption and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF."...

libxml2: Out-of-bounds read via a document that ends abruptly

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related to the lack of certain checks for the XMLPARSEREOF state...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libxml2 vulnerabilities (USN-1334-1)

It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the...