CVE-2018-12108

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

Apache ORC Denial of Service Vulnerability

Apache ORC is the United States Apache Apache Software Foundation, a columnar storage system, which supports data compression, ACID operations and indexing capabilities. A security vulnerability exists in Apache ORC versions 1.0.0 through 1.4.3. An attacker can exploit the vulnerability by means ...

CVE-2018-8015

In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. The impact of this bug is most likely denial-of-service against software that uses the ORC file parser. With the C++ parser, the stack overflow might possibly corrupt the...

CVE-2017-17131

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V500R002C10 have an DoS vulnerability due to insufficient validation of the parameter when a putty comment key is loaded. An authenticated...

OpenMPT and libopenmpt Out-of-Bounds Read Vulnerability

OpenMPT is an open source audio processing program . libopenmpt is a cross-platform C and C++ based audio playback library . An out-of-bounds read vulnerability exists in the soundlib/Loadstp.cpp file in OpenMPT versions 1.27.04.00 and earlier and libopenmpt versions 0.3.6 and earlier. An attacke...

UBUNTU-CVE-2018-6611

soundlib/Loadstp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file...

DEBIAN-CVE-2018-6611

soundlib/Loadstp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file...

Buffer Overflow Vulnerability in Dahua Play Library SDK dhplay.dll

Dahua Playback Library SDK is a supporting product for all devices of Zhejiang Dahua Technology Co., Ltd. and supports all stream formats of the company's devices. A buffer overflow vulnerability exists in dhplay.dll of the Dahua Play Library SDK. The vulnerability is caused by a malformed file i...

AZL-43615 CVE-2017-15642 affecting package sox 14.4.2.0-34

In lsxaiffstartread in aiff.c in Sound eXchange SoX 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file...

CVE-2017-15018

LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k344 in vbrquantize.c...

Acunetix Denial of Service Vulnerability

Acunetix is a Web application security scanner from Acunetix, Inc. that supports penetration testing, multi-threaded scanning, and client-side script analysis, among other security features. A denial of service vulnerability exists in the Reporter.exe file in Acunetix version 8. A remote attacker...

CVE-2017-11673

Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed PRE file, related to a "User Mode Write AV starting at reporter!madTraceProcess."...

ImageMagick 'ReadOneJNGImage' function CPU exhaustion vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'ReadOneJNGImage' function in the coders/png.c file in ImageMagick versions...

Denial of Service Vulnerability in PhotoPad

PhotoPad is a photo editor. PhotoPad suffers from a denial of service vulnerability. An attacker can exploit this vulnerability to construct a malformed PPP file to cause the program to crash and execute arbitrary code...

Heap Overflow Vulnerability in WPS

WPS is an office software developed by Kingsoft Office Software. A heap overflow vulnerability exists in WPS text. The vulnerability is due to the program fails to validate the buffer length, an attacker can exploit the vulnerability by constructing a malformed XML file resulting in heap corrupti...

Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1261 A detailed introduction to MsMpEng can be found in issue 1252 , so I will skip the background story here. Through fuzzing, we have discovered a number of ways to crash the service and specifically code in the mpengine.dll...

Dropbox Lepton Denial of Service Vulnerability (CNVD-2017-08238)

Dropbox Lepton is a set of tools for lossless compression of JPEG format files. A denial of service vulnerability exists in Dropbox Lepton version 1.2.1, which can be exploited by an attacker to perform a DoS SEGV and application crash via an incorrectly formatted lepton file...

Code injection

Dropbox Lepton 1.2.1 allows DoS SEGV and application crash via a malformed lepton file because the code does not ensure setup of a correct number of threads...

CVE-2017-8891

Technical details (affected product versions, root cause specifics, exploits) are not publicly disclosed in the provided documents; monitor for updates.

Unspecified Vulnerability in Quick Heal Internet Security, Total Security and AntiVirus Pro (CNVD-2017-07051)

Quick Heal Internet Security, Quick Heal Total Security and Quick Heal AntiVirus Pro are antivirus programs from Quick Heal India. An unspecified vulnerability exists in Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316 and Quick Heal AntiVirus Pro 10.1.0.316. This...