Debian: Security Advisory (DSA-4722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory Corruption Vulnerability in PM Designer by Yonghong

PM Designer is a programmable logic controller. A memory corruption vulnerability exists in Yonghong PM Designer when processing MID audio. An attacker can cause the program to crash by constructing a malformed file...

CVE-2019-20395

A stack-overflow flaw was found in libyang due to a self-referential union type containing leafrefs. Applications that use libyang to process untrusted input YANG files may crash while processing malformed files...

Memory Corruption Vulnerability in iPubsoft PDF to GIF Converter for Windows

iPubsoft PDF to GIF Converter for Windows is a PDF processing tool. A memory corruption vulnerability exists in iPubsoft PDF to GIF Converter for Windows, which can be exploited by attackers to cause the program to crash by constructing malformed PDF files...

USN-4172-1 file vulnerability

It was discovered that file incorrectly handled certain malformed files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code...

USN-4172-1: file vulnerability

It was discovered that file incorrectly handled certain malformed files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code...

Debian DSA-4550-1 : file - security update

A buffer overflow was found in file, a file type classification tool, which may result in denial of service or potentially the execution of arbitrary code if a malformed CDF Composite Document File file is processed. C Tenable Network Security, Inc. The descriptive text and package checks in this...

Updated libsndfile packages fix security vulnerability

Updated libsndfile package fixes security vulnerability: It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2019-3832...

Denial of Service Vulnerability in the Core Component of SmartMass Endpoint Security

Wise Quantity Terminal Security is a professional and reliable computer system security protection software developed in the latest 2018. There is a denial-of-service vulnerability in the core component of Wisdom Terminal Security. An attacker can exploit the vulnerability to construct malformed...

Updated vlc packages fixes security vulnerabilities

Updated vlc packages fixes security vulnerabilities: Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed CVE-2019-13602, CVE-2019-13962, CVE-2019-14437, CVE-2019-14438,...

BMP image processing binary vulnerability in Windshield Viewer

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

Binary Vulnerability in Windshade Viewer FyPicEditor.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

Binary Vulnerability in Windshade Viewer FyPicViewer.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

Debian DSA-4502-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c

REJECTED CVE A vulnerability exists in EDK-2 within BaseUefiDecompressLib.c MdePkg/Library/BaseUefiDecompressLib. An authenticated attacker could exploit this vulnerability by supplying a crafted file, potentially leading to privilege escalation...

CVE-2018-20860

libopenmpt before 0.3.13 allows a crash with malformed MED files...

Ubuntu 16.04 LTS / 18.04 LTS : flightcrew vulnerabilities (USN-4055-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4055-1 advisory. Mike Salvatore discovered that FlightCrew improperly handled certain malformed EPUB files. An attacker could potentially use this vulnerabili...

Ubuntu 16.04 LTS / 18.04 LTS : elfutils vulnerabilities (USN-4012-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4012-1 advisory. It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system were tricked into processing a...

Ubuntu: Security Advisory (USN-4012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4013-1 libsndfile vulnerabilities

It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code...