172 matches found
Siemens JT2Go and Teamcenter Visualization Double Release Vulnerability
Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A double release vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...
Jason Summers deark code issue vulnerabilities
Jason Summers deark is a Jason Summers open source application. A command line utility that can decode certain types of files. A null pointer dereference vulnerability exists in the dbufwrite function in src/deark-dbuf.c in versions of Jason Summers deark prior to 1.5.8, which can be exploited by...
OpenEXR FastHufDecoder Buffer Overflow DoS
The vulnerability of the FastHufDecoder function in the OpenEXR library is related to integer overflow during the processing of input files. Exploiting this vulnerability can allow a malicious actor to cause service failures by creating specially crafted EXR files...
USN-4835-1 vcftools vulnerabilities
It was discovered that VCFtools improperly handled certain input. If a user were tricked into opening a crafted input file, VCFtools could be made to crash or possibly cause other unspecified impact. CVE-2018-11099, CVE-2018-11129, CVE-2018-11130 It was discovered that VCFtools improperly handled...
FreeBSD : openexr, ilmbase -- security fixes related to reading corrupted input files (98044aba-6d72-11eb-aed7-1b1b8a70cc8b)
Cary Phillips reports : Patch release with various bug/sanitizer/security fixes, primarily related to reading corrupted input files.... C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021...
openexr, ilmbase -- security fixes related to reading corrupted input files
Cary Phillips reports: Patch release with various bug/sanitizer/security fixes, primarily related to reading corrupted input files...
PT-2021-2811
Name of the Vulnerable Software and Affected Versions tar versions 1.33 and earlier Description A flaw in the src/list.c of tar allows an attacker who can submit a crafted input file to cause uncontrolled consumption of memory, potentially leading to system availability issues. The vulnerability ...
CVE-2020-35738
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected. Mitigation If using the wavpack utility, this flaw c...
ImageMagick Input Validation Error Vulnerability (CNVD-2021-11327)
ImageMagick is a suite of open source image processing software. The software can read, convert or write images in a variety of formats. ImageMagick suffers from a security vulnerability, which stems from IntensityCompare of /magick/quantize.c, where a call to PixelPacketIntensity returns an...
CVE-2020-27764
In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator where a sizet cast should have been a ssizet cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity...
CVE-2020-27764
In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator where a sizet cast should have been a ssizet cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity...
raptor2 -- malformed input file can lead to a segfault
Redland Issue Tracker reports: due to an out of bounds array access in raptorxmlwriterstartelementcommon...
Oracle Linux 7 : cpio (ELSA-2020-3908)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-3908 advisory. 2.11-28 - Improper input validation when writing tar header fields 1766222 Tenable has extracted the preceding description block directly from the Oracle Linux...
In GNU patch through 2.7.6 the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.
...
CVE-2020-15807
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
CVE-2020-15807
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
Null pointer dereference
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files...
CVE-2020-15807
GNU LibreDWG (C library) prior to version 0.11 is affected by a NULL pointer dereference when processing crafted input files. This vulnerability, CVE-2020-15807, is documented across multiple feeds (NVD entry notes a NULL pointer dereference; Red Hat/SUSE/CNVD mirrors echo the same description). ...
