53 matches found
SUSE CVE-2015-0561
asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers to cause a denial of service out-of-bounds memory access and application crash via a crafted packet...
CVE-2017-14627
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
CVE-2017-14627
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
CVE-2017-14627
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
CVE-2017-14627: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the 1 author inside the INFORMATION tag, 2 name inside the INFORMATION tag, 3 artist inside the TRACK tag, or 4 default inside the TEXT tag parameter in an lpp project file...
PT-2017-13589
Name of the Vulnerable Software and Affected Versions CyberLink LabelPrint version 2.5 Description The issue allows remote attackers to execute arbitrary code via specific parameters in an lpp project file, including the author and name parameters inside the INFORMATION tag, the artist parameter...
CyberLink LabelPrint 2.5 Stack Buffer Overflow
This module exploits a stack buffer overflow in CyberLink LabelPrint 2.5 and below. The vulnerability is triggered when opening a .lpp project file containing overly long string characters via open file menu. This results in overwriting a structured exception handler record and take over the...
The vulnerability of the LPP process in the Android operating system’s CAF builds allows a perpetrator to compromise privacy, integrity, and accessibility.
The vulnerability of the LPP process in the Android operating system’s CAF builds is due to unvalidated array indexing. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Unspecified Vulnerability in Google Android Qualcomm Component (CNVD-2017-27866)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An unspecified vulnerability exists in the Google Android Qualcomm component with an array index...
Out-of-bounds
In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP...
CVE-2016-10386
In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP...
CVE-2016-10386
CVE-2016-10386 describes an array index out of bounds vulnerability in LPP within Qualcomm CAF Android/Linux kernel components. Public docs confirm the issue affects Qualcomm-labeled CAF Linux kernel code and characterize it as an out-of-bounds condition in LPP, with high-severity impact (per CVS...
CVE-2016-10386: Improper Validation of Array Index
In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP...
PT-2017-2726
Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is caused by an out-of-bounds array index in the LPP process of th...
PT-2016-5309
Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x through 4.1.1.7 IBM Spectrum Scale versions 4.2.x through 4.2.0.3 General Parallel File System GPFS versions 3.5.x through 3.5.0.31 General Parallel File System GPFS versions 4.1.x through 4.1.1.7 Descriptio...
PT-2016-5310
Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x through 4.1.1.7 IBM Spectrum Scale versions 4.2.x through 4.2.0.3 General Parallel File System GPFS versions 3.5.x through 3.5.0.31 General Parallel File System GPFS versions 4.1.x through 4.1.1.7 Descriptio...
SuSE 11.3 Security Update : wireshark (SAT Patch Number 10279)
wireshark has been updated to version 1.10.12 to fix six security issues : - The WCCP dissector could crash. bnc912365. CVE-2015-0559 / CVE-2015-0560 - The LPP dissector could crash. bnc912368. CVE-2015-0561 - The DEC DNA Routing Protocol dissector could crash. bnc912369. CVE-2015-0562 - The SMTP...
openSUSE Security Update : wireshark (openSUSE-SU-2015:0113-1)
This update fixes the following security issues : + The WCCP dissector could crash wnpa-sec-2015-01 CVE-2015-0559 CVE-2015-0560 boo912365 + The LPP dissector could crash. wnpa-sec-2015-02 CVE-2015-0561 boo912368 + The DEC DNA Routing Protocol dissector could crash. wnpa-sec-2015-03 CVE-2015-0562...
Wireshark Multiple Denial-of-Service Vulnerabilities -01 (Jan 2015) - Windows
Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wireshark Multiple Denial-of-Service Vulnerabilities -01 (Jan 2015) - Mac OS X
Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...