CVE-2016-9642

JavaScriptCore in WebKit allows attackers to cause a denial of service out-of-bounds heap read via a crafted Javascript file...

CVE-2016-9642

CVE-2016-9642 affects WebKit's JavaScriptCore in WebKitGTK+ (WebKitGTK+ up to version before 2.16.0) and WebKit/WebKitGTK+ deployments. The root cause is an out-of-bounds heap read triggered by a crafted Javascript file, leading to a denial of service. Public advisories (e.g., ASA-201704-9 for Ar...

CVE-2016-9642

JavaScriptCore in WebKit allows attackers to cause a denial of service out-of-bounds heap read via a crafted Javascript file...

PT-2017-10231

Name of the Vulnerable Software and Affected Versions WebKit affected versions not specified Description The issue allows attackers to cause a denial of service via a crafted Javascript file, specifically through an out-of-bounds heap read in JavaScriptCore. Recommendations At the moment, there i...

CVE-2016-9642

JavaScriptCore in WebKit allows attackers to cause a denial of service out-of-bounds heap read via a crafted Javascript file...

CVE-2016-10165

The TypeMLURead function in cmstypes.c in Little CMS aka lcms2 allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read...

UBUNTU-CVE-2016-9642

JavaScriptCore in WebKit allows attackers to cause a denial of service out-of-bounds heap read via a crafted Javascript file...

UBUNTU-CVE-2016-10165

The TypeMLURead function in cmstypes.c in Little CMS aka lcms2 allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read...

CVE-2017-5834

The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafted file...

openSUSE Security Update : lcms2 (openSUSE-2017-179)

This update for lcms2 to version 2.8 fixes the following issues : This security issue was fixed : - Fixed an out-of-bounds heap read in TypeMLURead that could be triggered by an untrusted image with a crafted ICC profile boo1021364. These non-security issues were fixed : - Fixed many typos in...

PT-2017-16703

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.3 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a malformed datetime string to the gst date time new from iso8601 string...

[SECURITY] [DSA 3774-1] lcms2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3774-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 29, 2017 https://www.debian.org/security/faq -...

Out-of-bounds

The parsergetnextchar function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read by crafting a string to the icalparserparsestring function...

Design/Logic Flaw

The icaltimefromstring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted string to the icalparserparsestring function...

CVE-2016-5826

The parsergetnextchar function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read by crafting a string to the icalparserparsestring function...

CVE-2016-5827

The icaltimefromstring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted string to the icalparserparsestring function...

CVE-2016-5827

The icaltimefromstring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted string to the icalparserparsestring function...

CVE-2016-5825

The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...

Out-of-bounds

The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...

CVE-2016-5826

CVE-2016-5826 is a vulnerability in libical where the function parser_get_next_char in versions 0.47 and 1.0 allows a remote attacker to trigger a denial of service via an out-of-bounds heap read when processing a crafted ICS file with icalparser_parse_string. Affected software is libical; availa...