234 matches found
CVE-2018-11432
The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11435
The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...
Heap overflow
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
Heap overflow
The bufferaddraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
Information disclosure
The mobireconstructparts function in parserawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...
CVE-2018-11433
The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11432
The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11433
The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11434
The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
Heap overflow
The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11435
The mobidecompresshuffmaninternal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...
CVE-2018-11437
The mobireconstructparts function in parserawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure read access violation via a crafted mobi file...
CVE-2018-11436
The bufferaddraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
CVE-2018-11436
CVE-2018-11436 affects Libmobi version 0.3. The vulnerability is in the buffer_addraw function of buffer.c, enabling a remote attacker to disclose information via a crafted MOBI file due to a heap-based over-read. The exploitation vector and impact are described as information disclosure; no in-w...
CVE-2018-11432
The connected documents confirm a vulnerability in Libmobi version 0.3 affecting the mobi_parse_mobiheader function in read.c, where a crafted MOBI file can cause information disclosure via a heap-based buffer over-read. This is a remote-triggered flaw with potential partial confidentiality impac...
CVE-2018-11432
The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11438
CVE-2018-11438 affects Libmobi 0.3. The vulnerability resides in mobi_decompress_lz77 (compression.c) and allows remote code execution via a crafted MOBI file, caused by a heap-based buffer overflow. Confirmed affected component is Libmobi 0.3; the issue is exploitable over the network through cr...
CVE-2018-11433
CVE-2018-11433 affects Libmobi 0.3. The vulnerability lies in mobi_get_kf8boundary_seqnumber (util.c), which can disclose memory via a crafted MOBI file due to a heap-based buffer over-read. Remote attackers could exploit this by using a specially crafted MOBI, enabling information disclosure. Th...
