Design/Logic Flaw

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

CVE-2018-12108

Dropbox Lepton 1.2.1 vulnerability (CVE-2018-12108) exists in the validation.cc file’s validateAndCompress function. A malformed input file can trigger a denial of service, causing a SIGFPE and application crash. Exploitation is described as remote, but no exploit details are provided in the conn...

CVE-2018-12108

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

Apache ORC Denial of Service Vulnerability

Apache ORC is the United States Apache Apache Software Foundation, a columnar storage system, which supports data compression, ACID operations and indexing capabilities. A security vulnerability exists in Apache ORC versions 1.0.0 through 1.4.3. An attacker can exploit the vulnerability by means ...

CVE-2018-8015

In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. The impact of this bug is most likely denial-of-service against software that uses the ORC file parser. With the C++ parser, the stack overflow might possibly corrupt the...

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

OpenMPT and libopenmpt Out-of-Bounds Read Vulnerability

OpenMPT is an open source audio processing program . libopenmpt is a cross-platform C and C++ based audio playback library . An out-of-bounds read vulnerability exists in the soundlib/Loadstp.cpp file in OpenMPT versions 1.27.04.00 and earlier and libopenmpt versions 0.3.6 and earlier. An attacke...

UBUNTU-CVE-2018-6611

soundlib/Loadstp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file...

DEBIAN-CVE-2018-6611

soundlib/Loadstp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file...

Buffer Overflow Vulnerability in Dahua Play Library SDK dhplay.dll

Dahua Playback Library SDK is a supporting product for all devices of Zhejiang Dahua Technology Co., Ltd. and supports all stream formats of the company's devices. A buffer overflow vulnerability exists in dhplay.dll of the Dahua Play Library SDK. The vulnerability is caused by a malformed file i...

AZL-43615 CVE-2017-15642 affecting package sox 14.4.2.0-34

In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...

CVE-2017-15018

LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k344 in vbrquantize.c...

Acunetix Denial of Service Vulnerability

Acunetix is a Web application security scanner from Acunetix, Inc. that supports penetration testing, multi-threaded scanning, and client-side script analysis, among other security features. A denial of service vulnerability exists in the Reporter.exe file in Acunetix version 8. A remote attacker...

CVE-2017-11673

Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed PRE file, related to a "User Mode Write AV starting at reporter!madTraceProcess."...

ImageMagick 'ReadOneJNGImage' function CPU exhaustion vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'ReadOneJNGImage' function in the coders/png.c file in ImageMagick versions...

Denial of Service Vulnerability in PhotoPad

PhotoPad is a photo editor. PhotoPad suffers from a denial of service vulnerability. An attacker can exploit this vulnerability to construct a malformed PPP file to cause the program to crash and execute arbitrary code...

Heap Overflow Vulnerability in WPS

WPS is an office software developed by Kingsoft Office Software. A heap overflow vulnerability exists in WPS text. The vulnerability is due to the program fails to validate the buffer length, an attacker can exploit the vulnerability by constructing a malformed XML file resulting in heap corrupti...

Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1261 A detailed introduction to MsMpEng can be found in issue 1252 , so I will skip the background story here. Through fuzzing, we have discovered a number of ways to crash the service and specifically code in the mpengine.dll...

Dropbox Lepton Denial of Service Vulnerability (CNVD-2017-08238)

Dropbox Lepton is a set of tools for lossless compression of JPEG format files. A denial of service vulnerability exists in Dropbox Lepton version 1.2.1, which can be exploited by an attacker to perform a DoS SEGV and application crash via an incorrectly formatted lepton file...

Code injection

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...