3303 matches found
The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure
The vulnerability of the TIFFFax3fillruns function in the LibTIFF library is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure termination of the application by using a specially crafted Tiff image...
CVE-2016-9356
An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue...
The vulnerability of the unarj library, which provides data archiving, allows attackers to re-record any files they choose.
The vulnerability of the -x command line option for extracting the unarj library, which handles data archiving, is related to deficiencies in path name restrictions. Exploiting this vulnerability allows a malicious actor to overwrite arbitrary files using an arj archive with file names containing...
UBUNTU-CVE-2016-10192
Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...
UBUNTU-CVE-2016-4570
The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service stack consumption via crafted xml file...
The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure
The vulnerability of the tiffsplit service in the LibTIFF library arises from an operation that goes beyond the buffer boundaries on the stack. Exploiting this vulnerability allows a malicious actor to cause a service failure using a specially crafted file...
USN-3184-1 irssi vulnerabilities
It was discovered that the Irssi buf.pl script set incorrect permissions. A local attacker could use this issue to retrieve another user's window contents. CVE-2016-7553 Joseph Bisch discovered that Irssi incorrectly handled comparing nicks. A remote attacker could use this issue to cause Irssi t...
UBUNTU-CVE-2016-7985
The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calmfastprint...
USN-3176-1 pcsc-lite vulnerability
Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to crash, resulting in a denial of service, or possibly execute arbitrary code with root privileges...
CVE-2016-6287
The "http-client" egg always used a HTTPPROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied "Proxy" header could allow an attacker to direct all HTTP requests throu...
Denial Of Service (DoS)
sequel is vulnerable to denial of service DoS attacks. The library uses the packaged JSON ruby gem which can be used by a malicious user to create ruby symbols on a system. Since ruby symbols are not removed by the garbage collector, this can lead to a denial of service on the system via resource...
CVE-2016-5684
An exploitable out-of-bounds write vulnerability exists in the XMP image handling functionality of the FreeImage library. A specially crafted XMP file can cause an arbitrary memory overwrite resulting in code execution. An attacker can provide a malicious image to trigger this vulnerability...
PT-2016-4580 · X.Org Foundation +5 · Libxpm +5
Name of the Vulnerable Software and Affected Versions: libXpm versions prior to 3.5.12 Description: The issue is related to multiple integer overflows that occur when a program requests parsing XPM extensions on a 64-bit platform. This can be triggered by a crafted XPM file, specifically through...
UBUNTU-CVE-2016-6906
The readimagetga function in gdtga.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file, related to the decompression buffer...
UBUNTU-CVE-2016-9627
An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote attackers to cause a denial of service heap buffer overflow and crash via a crafted HTML page...
Null pointer dereference
An error within the "tardirectoryforfile" function gsf-infile-tar.c in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file...
DEBIAN-CVE-2016-4332
The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This...
Heap overflow
The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library will cast the structure to an alternative structure and then assign to fields that aren't supported by the message type and the library will write outside the bounds of the heap buffer. This...
libdwarf heap buffer overflow vulnerability (CNVD-2016-10045)
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A heap buffer overflow vulnerability exists in the libdwarf function dwarfgetsizeofval, which can be exploited by an attacker to execute arbitrary code...