Arbitrary File Read

dompdf is vulnerable to arbitrary file read. A malicious user can bypass chroot protections with the PHP protocols and wrappers through the inputfile parameters...

PT-2017-18759 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read and SEGV. This is related to the ReadImage function in input-bmp.c. Recommendations: For AutoTrace version...

PT-2017-18738 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to the pnm load ascii function in input-pnm.c, which allows remote attackers to cause a denial of service, resulting in an invalid write and SEGV. Recommendations: For AutoTrace versi...

LibSass: heap-buffer-overflow (read outside of buffer) in Sass::Prelexer::exactly<(char)92>(char const*) - libsass/src/lexer.hpp:92

Built with afl-clang-fast from git source 5909ba5. Feeding a file that contains nothing but '\ to sassc triggers this flaw. ==22006==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200000ef93 at pc 0x000000907c6a bp 0x7fff656d9430 sp 0x7fff656d9428 READ of size 1 at 0x60200000ef93...

CVE-2016-8032

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file...

CVE-2016-8032

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file...

CVE-2016-8032

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file...

CVE-2016-8031

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local users to bypass local security protection via a crafted input file...

CVE-2016-8031

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local users to bypass local security protection via a crafted input file...

CVE-2016-8031

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local users to bypass local security protection via a crafted input file...

CVE-2016-8031

The CVE-2016-8031 entry concerns Intel Security Anti-Virus Engine (AVE) versions 5200 through 5800. The vulnerability is a local bypass of security protections, exploitable by a crafted input file, allowing a local attacker to bypass local security controls. The available connected documents conf...

GNU GTypist 2.9.5-2 - Local buffer overflow vulnerability

Author: k0Sh1 Vulnerability analysis GNU GTypist is a Linux text editing software, more awkward is in my debugging process, we found gtypist actually open the CNARAY and NX, that is, in accordance with the PoC given in the Exploit should be unable to take advantage of, this should be a denial of...

vorbis-tools infinite loop vulnerability

Vorbis-tools is used to manipulate and create Vorbis files.OGG Vorbis is a new audio compression format, similar to existing music formats such as MP3. vorbis-tools infinite loop vulnerability. The designer did not set up a numeric legitimacy check, which led to an overflow in the fseek function ...

[SECURITY] [DLA 655-1] mpg123 security update

Several security vulnerabilities have been discovered in mpg123, an MPEG layer 1/2/3 audio decoder and player. An attacker could take advantage of these flaws to cause a denial of service against mpg123 or applications using the libmpg123 library with a carefully crafted input file. CVE-2014-9497...

xdelta3 Buffer Overflow Vulnerability

xdelta is a suite of command-line programs developed by software developer Joshua MacDonald for working with incremental encoding not complete storage or transmission of data. xdelta3 is an enhanced version of xdelta. A buffer overflow vulnerability in xdelta3 versions prior to 3.0.9 allows remot...

CVE-2014-9765

Buffer overflow in the maingetappheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file...

Buffer overflow

Buffer overflow in the maingetappheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file...

CVE-2014-9765

Buffer overflow in the maingetappheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file...

Cookiescanner - Tool to Check the Cookie Flag for a Multiple Sites

Tool to do more easy the web scan proccess to check if the secure and HTTPOnly flags are enabled in the cookies path and expires too. This tools allows probe multiple urls through a input file, by a google domain looking in all subdomains or by a unique url. Also, supports multiple output like...

Adobe Flash - .SWF Out-of-Bounds Memory Read (2)

Adobe Flash - .SWF Out-of-Bounds Memory Read 2 Source: https://code.google.com/p/google-security-research/issues/detail?id=362&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The following access violation was observed in the Adobe Flash Player plugin: 1dec.1af0: Access...