PT-2017-12363

Name of the Vulnerable Software and Affected Versions ytnef version 1.9.2 Description A denial of service issue was discovered, allowing attackers to cause a denial of service via a crafted file. This issue is related to an invalid memory read vulnerability in the SwapDWord function in ytnef.c...

Sound eXchange 'read_samples' Function Denial of Service Vulnerability

Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A security vulnerability exists in the 'readsamples' function of the hcom.c file in SoX version 14.4.2. A remote attacker can exploit this...

gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

Code injection

The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...

CVE-2017-11119

The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...

CVE-2017-11330

The DivFixppCore::aviheaderfix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service invalid memory write and application crash via a crafted avi file...

CVE-2017-11119

The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...

CVE-2017-11119

Summary (CVE-2017-11119) : The vulnerability affects Nosefart 2.9-mls, in the chk_mem_access function of cpu/nes6502/nes6502.c within libnosefart.a. A crafted NSF file can cause a denial of service by triggering an invalid memory read and application crash. The linked (connected) documents consis...

PT-2017-11930

Name of the Vulnerable Software and Affected Versions DivFix++ version 0.34 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory write and application crash, via a crafted avi file. This is due to a problem in the DivFixppCore::avi header fix...

PT-2017-11755

Name of the Vulnerable Software and Affected Versions Nosefart version 2.9-mls Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and application crash, via a crafted nsf file. This is due to a problem in the chk mem access function in...

Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities

Sound eXchange SoX multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer audio files in to other formats. It can also apply...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities

Sound eXchange SoX 14.4.2 - Multiple Vulnerabilities Sound eXchange SoX multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer...

Memory corruption

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...