11322 matches found
CVE-2017-14682
CVE-2017-14682 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-14682
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928...
CVE-2017-14682
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928...
CVE-2017-14647
A heap-based buffer overflow was discovered in AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...
CVE-2017-14647
A heap-based buffer overflow was discovered in AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...
CVE-2017-14644
A heap-based buffer overflow was discovered in the AP4HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...
CVE-2017-14644
A heap-based buffer overflow was discovered in the AP4HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution...
CVE-2017-14647
The CVE affects Bento4 1.5.0-617: a heap-based buffer overflow in AP4_VisualSampleEntry::ReadFields (Core/Ap4SampleEntry.cpp) causes an out-of-bounds write, leading to remote denial of service or possibly code execution. No details on exploit vectors or fixes are provided in the connected sources...
CVE-2017-14644
The CVE-2017-14644 entry affects Bento4 (version 1.5.0-617) with a heap-based buffer overflow in the AP4_HdlrAtom class. The out-of-bounds write can lead to remote denial of service or potentially code execution. No explicit exploitation details or patched remediation are provided in the connecte...
CVE-2017-14631
In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...
CVE-2017-14631
In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...
CVE-2017-14631
In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...
CVE-2017-14628
In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp...
CVE-2017-14628
CVE-2017-14628 affects sam2p 0.49.3, where a heap-based buffer overflow exists in the pcxLoadImage24 function (in_pcx.cpp). The issue can lead to denial of service. Public advisories confirm upstream fixes in later releases; Debian and OSV entries indicate the vulnerability was addressed in upstr...
CVE-2017-14628
In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp...
CVE-2017-14631
In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...
OPENSUSE-SU-2017:2539-1 Security update for freexl
This update for freexl to version 1.0.4 fixes several issues. These security issues were fixed: - CVE-2017-2924: Prevent heap-based buffer overflow in the readlegacybiff function bsc1058433. - CVE-2017-2923: Prevent heap-based buffer overflow in the readbiffnextrecord function bsc1058431...
libvorbis -- two vulnerabilities
Two vulnerabilities were fixed in the upstream repository: The barknoisehybridmp function allows remote attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact via a crafted file. mapping0forward does not validate the number of...
Iceni Argus TrueType Font File Cmap Table Code Execution Vulnerability(CVE-2016-8386)
Summary An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than...
CVE-2017-14682
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928...