1693 matches found
Amazon Linux 2 : libtiff (ALAS-2019-1327)
Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service application crash via a crafted GIF file.CVE-2016-3186 An integer overflow has been discovered in libtiff in TIFFSetupStrips:tifwrite.c, which could lead to a heap-bas...
ALPINE-CVE-2019-18224
idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string...
DEBIAN-CVE-2019-17542
FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
Amazon Linux AMI : libtiff (ALAS-2019-1306)
Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service application crash via a crafted GIF file.CVE-2016-3186 An integer overflow has been discovered in libtiff in TIFFSetupStrips:tifwrite.c, which could lead to a heap-bas...
openSUSE: Security Advisory for jasper (openSUSE-SU-2019:2279-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : jasper (openSUSE-2019-2282)
This update for jasper fixes the following issues : Security issues fixed : - CVE-2018-19540: Fixed a heap based overflow in jasicctxtdescinput bsc1117508. - CVE-2018-19541: Fix heap based overread in jasimagedepalettize bsc1117507. This update was imported from the SUSE:SLE-15:Update update...
EulerOS 2.0 SP5 : icu (EulerOS-SA-2019-1969)
According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows...
Arbitrary Code Execution
libcurl.so is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function tftpreceivepacket that receives data from a TFTP server could potentially allow an attacker to execute arbitrary code by sending an OACK without the BLKSIZE option, when a BLKSIZE smaller than 512...
PT-2021-5792 · FFmpeg +5 · Ffmpeg +5
Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: The issue is related to a heap-based Buffer Overflow Vulnerability in the convolution y 8bit function of the FFmpeg library. This vulnerability could allow a remote attacker to cause a Denial of Service. The...
PT-2020-9627 · Sdl +3 · Sdl +3
Name of the Vulnerable Software and Affected Versions: SDL versions prior to 1.2.15 SDL versions 2.x prior to 2.0.9 Description: A heap-based buffer overflow flaw exists while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image. This issue...
2019 Pwn2Own for compromised VMware virtual machine escape vulnerability analysis-vulnerability warning-the black bar safety net
At this year's Vancouver Pwn2Own contest during Fluoroacetate team shows them through the use of VMware Workstation from the client virtual machine to escape to the physical machine. They use the virtual USB 1.1 UHCI postage host controller interface in the cross-border read/write vulnerabilities...
Scientific Linux Security Update : libtiff on SL7.x x86_64 (20190806)
Security Fixes : - libtiff: buffer overflow in gif2tiff CVE-2016-3186 - libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution CVE-2018-12900 - libtiff: Out-of-bounds write in tifjbig.c CVE-2018-18557 - libtiff: NUL...
file -- Heap buffer overflow possible
mitre reports cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...
Arbitrary Code Execution
php is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function gdImageColorMatch in gdcolormatch.c allows an attacker to execute arbitrary code on the system...
Heap overflow
AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load in a2m.cpp...
UBUNTU-CVE-2019-14733
AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load in rad.cpp...
UBUNTU-CVE-2019-14691
AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load in dtm.cpp...
poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc
A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...