3309 matches found
CVE-2017-9534
CVE-2017-9534 affects IrfanView 4.44 (32‑bit) with FPX Plugin 4.46. A crafted .fpx file enables arbitrary code execution or denial of service, related to a User Mode Write AV starting at FPX!GetPlugInInfo+0x0000000000017426. Several connected advisories corroborate buffer/heap issues in FPX-relat...
CVE-2017-9916
CVE-2017-9916 affects IrfanView 4.44 (32-bit) with TOOLS Plugin 4.50. A crafted file can trigger a denial of service, with potential for arbitrary code execution via Data from Faulting Address controls Branch Selection (noted in ntdll and related modules). Exploitation details indicate multiple v...
CVE-2017-10730
Affected product: IrfanView 4.44 (32‑bit). Technical details from connected docs show a buffer overflow in the image formats, notably the .rle parser, and multiple local/exploitable vulnerabilities in IrfanView 4.44 with FPX/TOOLs plugins and other formats (PDF, SVG, DJVU, etc.). Root causes invo...
CVE-2017-8766
CVE-2017-8766 concerns IrfanView 4.44 (32‑bit). The connected documentation confirms a vulnerability in the program’s handling of .mov files that can cause arbitrary code execution, linked to a User Mode Write AV near NULL. The Kaspersky advisory enumerates a set of buffer‑overflow issues in Irfa...
CVE-2017-9533
Summary of CVE-2017-9533 : A buffer/AV condition in IrfanView 4.44 (32-bit) with FPX Plugin 4.46 can be triggered by a specially crafted .fpx file. The underlying issue is described as a write-after-read/AV in FPX_DE_Decode (and related FPX code paths), enabling arbitrary code execution or Denial...
CVE-2017-8368
Sublime Text 3 Build 3126 is reported vulnerable to a user‑assisted DoS (and possibly other impact) via a crafted .mkv file. According to the sources, the issue can be triggered when a user opens a malicious MKV payload and issues commands such as Ctrl‑A, Delete, and Ctrl‑Z, with the exploit requ...
CVE-2017-9890
IrfanView version 4.44 32bit with FPX Plugin 4.46 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .fpx file, related to a "Read Access Violation starting at FPX+0x000000000000153a."...
Humax Digital HG100R Root Credentials Disclosure Vulnerability
The Humax Digital HG100R is a router from the Korean company Humax Digital. A security vulnerability exists in the Humax Digital HG100R version 2.0.6. The vulnerability can be exploited by an attacker to obtain the root certificate from a backup file...
Freeware Advanced Audio mp4ff_read_stts Denial of Service Vulnerability
Freeware Advanced Audio Decoder is advanced audio encoder. Freeware Advanced Audio Decoder 2 FAAD2 version 2.7, a security vulnerability exists in the common/mp4ff/mp4atom.c/mp4ffreadstts function, which can be exploited by remote attackers to cause a denial of service vulnerability via a...
MGASA-2017-0197 Updated libsndfile packages fix security vulnerability
In libsndfile, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file CVE-2017-6892...
DEBIAN-CVE-2017-9221
The mp4ffreadmdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 FAAD2 2.7 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted mp4 file...
BSA-2017-349
Security Advisory ID : BSA-2017-349 Component : SUDO Revision : 2.0: Interim A flaw was found in the waysudoparsedttyinformation from the process status file in the proc filesystem. A local user with privileges to execute commands viasudocould use this flaw to escalate their privileges to root...
Description of the security update for Office 2016: June 13, 2017 (KB3178667)
None None...
CVE-2017-2182
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2181...
Arbitrary file deletion
Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file...
Google Chrome FFmpeg Memory Misreference Vulnerability
Google Chrome is a web browser developed by Google.FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A memory misreference vulnerability exists in the libavformat/mov.c file of FFmpeg in Google Chrome version 41.0.2251.0. A remote attacker...
DEBIAN-CVE-2015-1207
Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service memory corruption and crash via a crafted .m4a file...
CVE-2015-5468
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...
D-Link DIR-600M Authentication Bypass Vulnerability
D-Link DIR-600M is a wireless router product from AUO D-Link. An authentication bypass vulnerability exists in the login.cgi file in D-Link DIR-600M devices with firmware version 3.04. A remote attacker can exploit this vulnerability by entering more than 20 spaces into the password field to bypa...
