11324 matches found
CVE-2017-8366
The strescape function in ecstrings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted filter that is mishandled by etterfilter...
CVE-2017-8358
LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...
CVE-2017-8358
CVE-2017-8358 is an out-of-bounds write caused by a heap-based buffer overflow in LibreOffice’s ReadJPEG path (vcl/source/filter/jpeg/jpegc.cxx). Connected sources confirm affected product: LibreOffice; root cause: heap-based overflow in ReadJPEG; impact as stated: out-of-bounds write with potent...
CVE-2017-8358
LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...
libmad -- multiple vulnerabilities
National Vulnerability Database: CVE-2017-8372: The madlayerIII function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted audio file. CVE-2017-8373: The madlayerIII function ...
CVE-2017-8325
The iwprocesscolstointermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted image...
Heap Based Buffer Overflow
FreeType is vulnerable to out-of-bounds write issues. These writes are caused by a heap-based buffer overflow in the t1builderclosecontour function in psaux/psobjs.c. If a malformed font is supplied, it is possible that the contour variable is started but no points added, causing the buffer...
CVE-2017-8287
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...
CVE-2017-8287
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...
CVE-2017-8287
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...
CVE-2017-8287
CVE-2017-8287 affects FreeType 2 up to 2.7.1, with an out-of-bounds write caused by a heap-based buffer overflow in psaux/psobjs.c:t1_builder_close_contour. This can enable remote code execution via malformed fonts. Advisories (e.g., Arch Linux ASA-201705-7/-10 and distro advisories) recommend up...
Debian DLA-918-1 : freetype security update
It was found that an out of bounds write caused by a heap-based buffer overflow could be triggered in freetype via a crafted font. This update also reverts the fix for CVE-2016-10328, as it was determined that freetype 2.4.9 is not affected by that issue. For Debian 7 'Wheezy', these problems hav...
CVE-2017-6037
CVE-2017-6037 affects Wecon Technologies LEVI Studio HMI Editor (pre-1.8.1). A heap-based buffer overflow occurs when running a maliciously crafted project file, with CVSS v3 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Related CNVD/NVD entries corroborate a similar vulnerability; ICS-CE...
Out-of-Bounds Write
freetype is vulnerable to an out-of-bounds write. A malicious user can pass a cff font file to the application to cause a heap-based buffer overflow that can lead to an out-of-bounds write. This can cause the application to crash or overwrite values in the heap...
CVE-2017-8287
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...
CVE-2017-8105
FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...
CVE-2017-8105
FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...
CVE-2017-8105
CVE-2017-8105 affects FreeType 2 and earlier (up to 2017-03-24 release), with an out-of-bounds heap write in t1_decoder_parse_charstrings (psaux/t1decode.c). Connected sources confirm remote code execution risk and/or denial of service in several Linux distributions; impacted packages include fre...