1821 matches found
CVE-2018-16717
A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...
Denial Of Service (DoS) And Remote Code Execution (RCE)
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF images using the Pixar Log Format encoding. An attacker could create a specially-crafted TIFF file that,...
CVE-2019-9135
DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...
CVE-2019-9136
DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...
Heap overflow
DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...
CVE-2019-9136
CVE-2019-9136 concerns DaviewIndy 8.98.7 and earlier, where a heap-based overflow in the JPEG2000 file handling by Daview.exe can be triggered by opening a malformed JPEG2000 file, enabling arbitrary code execution per the description. Affected component appears to be the JPEG2000 decoder/loader ...
CVE-2019-9135
DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...
CVE-2019-9135
DaviewIndy 8.98.7 and earlier versions are affected by a heap-based overflow triggered when opening a malformed DIB format file mishandled by Daview.exe. Exploitation could lead to arbitrary code execution. The available sources (NVD/NVD-derived records and related CVE feeds) confirm the vulnerab...
PT-2019-19379
Name of the Vulnerable Software and Affected Versions DaviewIndy versions 8.98.7 and earlier Description The issue is triggered when a user opens a malformed DIB format file, which is mishandled by Daview.exe, leading to a Heap-based overflow. This could allow attackers to exploit the issue and...
PT-2019-19380
Name of the Vulnerable Software and Affected Versions DaviewIndy versions 8.98.7 and earlier Description The issue is triggered when a user opens a malformed JPEG2000 format file, which is mishandled by Daview.exe, leading to a Heap-based overflow. This could allow attackers to exploit the issue...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in GNU glibc (CVE-2017-15804 CVE-2017-15670 CVE-2015-5180)
Summary IBM Advanced Management Module AMM has addressed the following vulnerabilities in GNU glibc. Vulnerability Details CVEID: CVE-2017-15804 DESCRIPTION: GNU C Library aka glibc or libc6 is vulnerable to a buffer overflow, caused by improper bounds checking by glob function in glob.c. By usin...
EulerOS Virtualization 2.5.4 : libXcursor (EulerOS-SA-2019-1191)
According to the version of the libXcursor package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libxcursor: 1-byte heap-based overflow in XcursorThemeInherits function in library.c CVE-2015-9262 Note that Tenable Network...
freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress() function
A flaw was found in freerdp in versions before versions 2.0.0-rc4. An integer overflow that leads to a heap-based buffer overflow in the gdiBitmapDecompress function leads to memory corruption. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...
CVE-2019-6778
In QEMU 3.0.0, tcpemu in slirp/tcpsubr.c has a heap-based buffer overflow...
CVE-2019-5019
A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 7,0,2018,1113. While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation betwe...
CVE-2019-5019
CVE-2019-5019 affects Antenna House Rainbow PDF Office Server Document Converter (V7.0 Pro R1, Linux64 7.0.2018.1113). The vulnerability resides in the PowerPoint conversion path via getSummaryInformation, where a misparsed PropertySetStream leads to an out-of-bounds write and heap corruption, en...
CVE-2019-5019
A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 7,0,2018,1113. While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation betwe...
PT-2019-17407
Name of the Vulnerable Software and Affected Versions Rainbow PDF Office Server Document Converter version 7.0 Pro R1 7,0,2018,1113 Description A heap-based overflow issue exists in the PowerPoint document conversion function. The getSummaryInformation function incorrectly checks the correlation...
Security Bulletin: IBM QRadar SIEM is vulnerable to Publicly disclosed Samba vulnerabilities (CVE-2018-10858, CVE-2018-1139)
Summary Publicly disclosed Samba vulnerabilities Vulnerability Details CVEID: CVE-2018-10858 Description: Samba is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by libsmbclient. By sending an overly long filename, a remote attacker could overflow a buffer and...