DEBIAN-CVE-2016-2538

Multiple integer overflows in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service QEMU process crash or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the 1...

CVE-2016-2538

CVE-2016-2538 : In QEMU, the USB Net device emulator (hw/usb/dev-network.c) contains multiple integer overflows in versions before 2.5.1. This can allow local guest OS administrators to crash the QEMU process (denial of service) and, in some cases, leak host memory via a remote NDIS control messa...

CVE-2016-2538

Multiple integer overflows in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service QEMU process crash or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the 1...

CVE-2016-4355

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service crash via crafted BER data, which leads to a buffer overflow...

CVE-2016-4355

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service crash via crafted BER data, which leads to a buffer overflow...

CVE-2016-2463

Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media...

CVE-2016-2463

Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media...

CVE-2016-1951

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime NSPR before 4.12 allow remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a long string to a PRprintf function...

CVE-2016-1951

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime NSPR before 4.12 allow remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a long string to a PRprintf function...

openSUSE Security Update : expat (openSUSE-2016-695)

This update for expat fixes the following issues : Security issue fixed : - CVE-2016-0718: Fix Expat XML parser that mishandles certain kinds of malformed input documents. bsc979441 - CVE-2015-1283: Fix multiple integer overflows. bnc980391 This update was imported from the SUSE:SLE-12:Update...

SUSE-SU-2016:1508-1 Security update for expat

This update for expat fixes the following issues: Security issue fixed: - CVE-2016-0718: Fix Expat XML parser that mishandles certain kinds of malformed input documents. bsc979441 - CVE-2015-1283: Fix multiple integer overflows. bnc980391...

CVE-2015-8875

Multiple integer overflows in the 1 pixopscompositenearest, 2 pixopscompositecolornearest, and 3 pixopsprocess functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image, whi...

CVE-2015-8875

Multiple integer overflows in the 1 pixopscompositenearest, 2 pixopscompositecolornearest, and 3 pixopsprocess functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image, whi...

CVE-2015-8875

CVE-2015-8875 affects the GDK-PixBuf library, specifically the pixops.c implementations (pixops_composite_nearest, pixops_composite_color_nearest, pixops_process) in gdk-pixbuf, with versions before 2.33.1 vulnerable. The flaw is a heap-based buffer overflow triggered by crafted images, enabling ...

CVE-2015-8875

Multiple integer overflows in the 1 pixopscompositenearest, 2 pixopscompositecolornearest, and 3 pixopsprocess functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image, whi...

CVE-2015-8875

Multiple integer overflows in the 1 pixopscompositenearest, 2 pixopscompositecolornearest, and 3 pixopsprocess functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image, whi...

CVE-2015-8875

Multiple integer overflows in the 1 pixopscompositenearest, 2 pixopscompositecolornearest, and 3 pixopsprocess functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image, whi...

openSUSE Security Update : expat (openSUSE-2016-660)

This update for expat fixes the following security issues : - CVE-2015-1283: Fixed multiple integer overflows that could lead to buffer overflows boo980391 - CVE-2016-0718: Fixed Expat XML parser that mishandles certain kinds of malformed input documents boo979441. %NASLMINLEVEL 70300 C Tenable...

Security update for expat (important)

This update for expat fixes the following security issues: - CVE-2015-1283: Fixed multiple integer overflows that could lead to buffer overflows boo980391 - CVE-2016-0718: Fixed Expat XML parser that mishandles certain kinds of malformed input documents boo979441...

CVE-2016-4073

Multiple integer overflows in the mbflstrcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted mbstrcut call...