782 matches found
PT-2017-17645
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue arises from an invalid read in the Binary File Descriptor BFD library, which is part of GNU Binutils. This occurs because the code responsible for emitting relocs does not verify the format of th...
PT-2017-17650
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue is caused by an invalid read in the Binary File Descriptor BFD library due to a missing check for an invalid sh link field. This results in Binutils utilities, such as strip, crashing...
PT-2017-17648
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The Binary File Descriptor library has a function in bfd/aoutx.h that is prone to an invalid read due to missing checks for unrecognized relocs, causing utilities like strip to crash. Recommendations For G...
CVE-2017-6851
The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...
OracleVM 3.3 / 3.4 : openjpeg (OVMSA-2017-0048)
The remote OracleVM system is missing necessary patches to address critical security updates : - Revert previous changes in patch for CVE-2016-5159 - Fix double free in patch for CVE-2016-5139 - Fix memory leaks and invalid read in ciobytein Related: 1419775 - Add two more allocation checks to...
APNGDis 2.8 - filename Stack Buffer Overflow Exploit
Exploit for multiple platform in category dos / poc Exploit Title: APNGDis filename Buffer Overflow Date: 14-03-2017 Exploit Author: Alwin Peppels Vendor Homepage: http://apngdis.sourceforge.net/ Software Link: https://sourceforge.net/projects/apngdis/files/2.8/ Version: 2.8 Tested on: Linux Debi...
CVE-2017-6840
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...
DEBIAN-CVE-2017-6840
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...
CVE-2017-6851
The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...
CVE-2017-6851
The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image...
CVE-2017-6851
JasPer 2.0.10 is affected by CVE-2017-6851 via jas_matrix_bindsub in jas_seq.c, allowing a crafted image to trigger a denial of service (invalid read). The connected advisories (MGASA-2020-0337 and OSV-Managed pages) enumerate multiple Jasper CVEs and indicate fixes in updated Jasper packages; re...
CVE-2017-6840
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...
CVE-2017-6840
The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service invalid read via a crafted file...
PT-2017-17367
Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to an invalid read in the ColorChanger::GetColorFromStack function in colorchanger.cpp. Recommendations For PoDoFo...
PT-2017-17378
Name of the Vulnerable Software and Affected Versions JasPer version 2.0.10 Description The issue allows remote attackers to cause a denial of service, specifically an invalid read, by providing a crafted image. This is due to a problem in the jas matrix bindsub function in jas seq.c...
UBUNTU-CVE-2017-6309
An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parsefile function. These might lead to invalid read and write operations, controlled by an attacker...
DEBIAN-CVE-2017-6309
An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parsefile function. These might lead to invalid read and write operations, controlled by an attacker...
CVE-2017-6310
An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the fileaddmapiattrs function. These might lead to invalid read and write operations, controlled by an attacker...