PT-2019-6297

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software and Qualcomm chipsets SDM660, MSM8998, SDM845, SM8150 Description The issue is caused by an integer underflow in the Secure Storage Trustlet, which may allow a remote attacker to impact the...

PHP 7.1.x < 7.1.26 Multiple vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.26. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc function in gdinterpolation.c. An unauthenticated, remote attacker can hav...

PHP 7.3.x < 7.3.1 Multiple vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.3.x prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc function in gdinterpolation.c. An unauthenticated, remote attacker can have...

CVE-2018-20179

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspciprocess and results in memory corruption and probably even a remote code execution...

CVE-2018-20180

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbgprocess and results in memory corruption and probably even a remote code execution...

PT-2019-1918

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an integer underflow in the seamless process function, leading to a heap-based buffer overflow. This results in memory corruption and potentially allows for remot...

PT-2019-1916

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an Integer Underflow in the lspci process function, leading to a Heap-Based Buffer Overflow, which results in memory corruption and potentially allows for remote...

PT-2019-1917

Name of the Vulnerable Software and Affected Versions rdesktop versions up to and including v1.8.3 Description The issue is related to an integer underflow in the rdpsnddbg process function of the rdesktop RDP client, leading to a heap-based buffer overflow. This can cause memory corruption and...

Integer Underflow

ovs is vulnerable to integer underflows. The library does not properly check memory size in the ofputilpullqueuegetconfigreply10 function in lib\ofp-util.c, causing an integer underflow that can crash the application or overwrite memory...

Denial Of Service (DoS)

wpasupplicant is vulnerable to denial of service DoS attacks. The vulnerability exists as Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpasupplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of...

Debian DSA-4366-1 : vlc - security update

An integer underflow was discovered in the CAF demuxer of the VLC media player. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4366. The text itself is copyright C Software in the Public Interest, Inc...

[SECURITY] [DSA 4366-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4366-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2019 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4366-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

SUSE-SU-2019:13923-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2018-18544: Fixed memory leak in the function WriteMSLImage bsc1113064. - CVE-2017-10794: Fixed buffer overflow in RGB TIFF picture processing bsc1112392. - CVE-2017-14997: Fixed integer underflow in...

PT-2018-2713

Name of the Vulnerable Software and Affected Versions ntfs-3g version 2017.3.23 Description An integer underflow issue exists in ntfs-3g, which could be exploited by a local attacker to cause a heap buffer overflow. This could result in a crash or the ability to execute arbitrary code. In...

VLC Media Player CAF Demuxer Integer Underflow Vulnerability - Mac OS X

VLC media player is prone to an integer underflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Reader DC Onix NextKey Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

VLC Media Player CAF Demuxer Integer Underflow Vulnerability - Windows

VLC media player is prone to an integer underflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-16601: Integer Underflow (Wrap or Wraparound)

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memory space copy in prvProcessIPPacket, leading to denial of service and possibly...