CVE-2017-9153

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadrawpbm function in input-pnm.c:391:13...

CVE-2017-9166

CVE-2017-9166 affects AutoTrace 0.31.1 via the libautotrace.a library. The vulnerability is a heap-based buffer over-read in the GET_COLOR function (color.c:18:11). Exploitation could allow partial confidentiality/integrity/availability impact as reflected in the CVSS metrics (base score 7.5 on C...

CVE-2017-9191

CVE-2017-9191 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in rle_fread (input-tga.c:252:15). Multiple sources (CNVD, Red Hat, SUSE, NVD) describe potential arbitrary code execution or denial of service via crafted bitmap (TGA) files. Public exploit status isn’t ...

CVE-2017-9170

CVE-2017-9170 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in ReadImage (input-bmp.c:370:25). This vulnerability is documented across multiple sources (NVD, Red Hat advisories, CNVD) with the same description; some sources describe potential arbitrary code execut...

CVE-2017-9168

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25...

CVE-2017-9170

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25...

CVE-2017-9153

CVE-2017-9153 affects AutoTrace 0.31.1 (libautotrace.a) with a heap-based buffer overflow in pnm_load_rawpbm (input-pnm.c:391:13). This can be triggered by a crafted bitmap image, potentially enabling remote code execution or DoS. Remediation in public advisories recommends upgrading to a newer A...

CVE-2017-9146

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impa...

CVE-2017-9146

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impa...

CVE-2017-9146

The CVE-2017-9146 entry concerns the libytnef component (ytnef, libytnef) where TNEFFillMapi in lib/ytnef.c may allocate with a zero/nonzero count check, enabling a heap-based buffer overflow via a crafted tnef file. Affected up to ytnef 1.9.2; remote attackers could crash the application or caus...

CVE-2017-9146

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impa...

Heap-Based Buffer Overflow In Libxml2

nokogiri gem is using libxml2 which is vulnerable to CVE-2016-1834. The vulnerability exists when xmlStrlen returns a negative length in the xmlStrncat function. Therefore, it may lead to other attacks such as denial of service or arbitrary code execution through a heap-based buffer overflow usin...

Out-of-Bounds Write

FreeType is vulnerable to an out-of-bounds write. This is caused by the t1decoderparsecharstrings function in psaux/t1decode.c receiving a malicious string. This can cause a heap-based buffer overflow that can lead to an out-of-bounds write...

Integer Overflow

Pillow is vulnerable to integer overflow. A malicious user can pass an image file to the application to cause an integer overflow when resampling it. This can result in a heap-based buffer overflow that can have multiple impacts...

CVE-2017-6889

An integer overflow error within the "foveonloadcamf" function dcrawfoveon.c in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow...

CVE-2017-6889

An integer overflow error within the "foveonloadcamf" function dcrawfoveon.c in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow...

Artifex MuPDf JBIG2 Parser Code Execution Vulnerability

Summary An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the...

[ASA-201705-15] zziplib: multiple issues

Arch Linux Security Advisory ASA-201705-15 ========================================== Severity: High Date : 2017-05-12 CVE-ID : CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5979 CVE-2017-5981 Package : zziplib Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-191...

Google Chrome < 58.0.3029.81 Multiple Vulnerabilities (deprecated)

Binary data 700097.prm...

Hancom Thinkfree NEO Hangul Word Processor HWPTAG_TAB_DEF Tab Count Code Execution Vulnerability

Summary An exploitable heap-based buffer overflow exists in the Hangul Word Processor component version 9.6.1.4350 of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under th...