CVE-2018-10972

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

CVE-2018-10972

The CVE-2018-10972 entry concerns Free Lossless Image Format (FLIF) 0.3. The vulnerability lies in the TransformPaletteC::process function (transform/palette_C.hpp), which can be triggered by a crafted file to cause a heap-based buffer overflow and denial of service. The available connected docum...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:1180-1)

This update for tiff fixes the following issues : - CVE-2017-9935: There was a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an...

SUSE SLES11 Security Update : tiff (SUSE-SU-2018:1179-1)

This update for tiff fixes the following issues : - CVE-2016-9453: The t2preadwritepdfimagetile function allowed remote attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a JPEG file with a TIFFTAGJPEGTABLES of length one bsc1011107. -...

Denial Of Service (DoS) Through Heap Buffer Overflow

libexiv2.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in the Exiv2::l2Data function of types.cpp where processing a malicious file will cause a denial of service DoS through a heap-based buffer overflow issue...

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:1140-1)

This update for ghostscript-library fixes several issues. These security issues were fixed : - CVE-2017-7207: The memgetbitsrectangle function allowed remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document bsc1030263. - CVE-2016-9601: Prevent...

Foxit Reader U3D Texture Width Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

CVE-2016-10721

The CVE-2016-10721 entry concerns Partclone 0.2.87, specifically the partclone.restore code path. It describes a heap-based buffer overflow caused by insufficient validation of the partclone image header, enabling arbitrary code execution in the context of the user running the affected applicatio...

CVE-2016-10722

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the markreservedsectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected...

EulerOS 2.0 SP1 : libtiff (EulerOS-SA-2018-1102)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impa...

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

CVE-2017-2923

An exploitable heap based buffer overflow vulnerability exists in the 'readbiffnextrecord function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2017-2923

An exploitable heap based buffer overflow vulnerability exists in the 'readbiffnextrecord function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2017-2924

The CVE-2017-2924 vulnerability affects FreeXL 1.0.3, with a heap-based buffer overflow in the read_legacy_biff function. A specially crafted XLS file can trigger memory corruption, leading to remote code execution. Exploitation involves sending a malicious XLS to the vulnerable library. Public r...

CVE-2017-2923

An exploitable heap based buffer overflow vulnerability exists in the 'readbiffnextrecord function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2018-10120

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

Foxit Reader BMP Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...