246 matches found
UBUNTU-CVE-2017-14057
In FFmpeg 3.3.3, a DoS in asfreadmarker due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "namelen" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name an...
DEBIAN-CVE-2017-14056
In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2readheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "framecount" field in the header but does not contain sufficient backing data, is provided, the loops for...
CVE-2017-14056
CVE-2017-14056 affects FFmpeg 3.3.3 in libavformat/rl2.c: rl2_read_header() lacks an End-of-File check for crafted RL2 files claiming a large frame_count, leading to loops that can exhaust CPU and memory. Impact: potential remote DoS via heavy resource consumption when parsing malicious RL2 strea...
CVE-2017-11523
The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service infinite loop via a crafted file, because the end-of-file condition is not considered...
Design/Logic Flaw
The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service infinite loop via a crafted file, because the end-of-file condition is not considered...
UBUNTU-CVE-2017-11523
The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service infinite loop via a crafted file, because the end-of-file condition is not considered...
CVE-2017-11523
The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service infinite loop via a crafted file, because the end-of-file condition is not considered...
The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick allows a hacker to cause a system to run out of resources due to the central processor.
The vulnerability of the ReadDPXImage function in the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the central processor’s resources to be exhausted by using a specially...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. CVE-2017-11352 was not correctly fixed, allowing attackers to crash an application. The crash is as a result of incorrect handling of End of File EOF handling...
DEBIAN-CVE-2017-11188
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...
UBUNTU-CVE-2017-11188
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be triggered by running a RLE image through coders/rle.c and leveraging a flaw in the end of file handling...
DEBIAN-CVE-2017-9144
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...
FreeBSD : asterisk -- Memory exhaustion on short SCCP packets (fab87bff-3ce5-11e7-bf9d-001999f8d30b)
The Asterisk project reports : A remote memory exhaustion can be triggered by sending an SCCP packet to Asterisk system with 'chanskinny' enabled that is larger than the length of the SCCP header but smaller than the packet length specified in the header. The loop that reads the rest of the packe...
UBUNTU-CVE-2017-9144
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c...
DEBIAN-CVE-2017-7223
GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...
UBUNTU-CVE-2017-7223
GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow of size 1 while attempting to unget an EOF character from the input stream, potentially leading to a program crash...
jsoup: XSS vulnerability related to incomplete tags at EOF
It was found that jsoup did not properly validate user-supplied HTML content; certain HTML snippets could get past the validator without being detected as unsafe. A remote attacker could use a specially crafted HTML snippet to execute arbitrary web script in the user's browser...
jsoup: XSS vulnerability related to incomplete tags at EOF
It was found that jsoup did not properly validate user-supplied HTML content; certain HTML snippets could get past the validator without being detected as unsafe. A remote attacker could use a specially crafted HTML snippet to execute arbitrary web script in the user's browser...