USN-4012-1 elfutils vulnerabilities

It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system were tricked into processing a specially crafted file, elfutils could be made to crash or consume resources, resulting in a denial of service...

PT-2019-2195 · Cisco +1 · Cisco Webex Network Recording Player +2

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description: A vulnerability exists due to improper validation of Advanced...

UBUNTU-CVE-2019-1788

A vulnerability in the Object Linking & Embedding OLE2 file scanning functionality of Clam AntiVirus ClamAV Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of prope...

USN-3911-1 file vulnerabilities

It was discovered that file incorrectly handled certain malformed ELF files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code...

Memory Corruption Vulnerability in Photo Lab Processing of psd Images

Photo Lab is a foreign photo viewing tool. A memory corruption vulnerability exists in Photo Lab's handling of psd images. An attacker can cause the program to crash by constructing a malformed psd image, which if successfully exploited can lead to arbitrary code execution...

SUSE-SU-2018:4155-1 Security update for ovmf

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. - CVE-2017-5732: Fixed...

Valve: Potential buffer overflow in demoplayer module of GoldSource Engine

Introduction Hey. There's a potential vulnerability in the GoldSource Engine that allows to write data to stack of arbitrary size, thereby causing a buffer overflow and the ability to execute assembler code using .dem files. Description The problem is located in the DemoPlayer::ReadDemoMessage...

CVE-2018-3926

An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite...

Updated blender packages fix security vulnerabilities

Updated blender package fixes security vulnerabilities: Multiple vulnerabilities have been discovered in various parsers of Blender. Malformed .blend model files and malformed multimedia files AVI, BMP, HDR, CIN, IRIS, PNG, TIFF may result in the execution of arbitrary code CVE-2017-2899,...

GNU Libextractor Buffer Overflow Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A stack-based buffer overflow vulnerability exists in the 'ecreadfilefunc' function unzip.c file in GNU Libextractor versions prior to 1.7. An attacker can exploit this vulnerability to execute...

Debian DSA-4249-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

UBUNTU-CVE-2018-12108

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service SIGFPE and application crash via a malformed file...

CVE-2018-8871

In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution...

USN-3638-1 qpdf vulnerabilities

It was discovered that QPDF incorrectly handled certain malformed files. A remote attacker could use this issue to cause QPDF to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2018-7523

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability...

CVE-2018-7523

CVE-2018-7523 affects Omron CX-Supervisor (SCS) parsing of project files, causing a double-free vulnerability. The ZDI advisory confirms remote code execution when a crafted project file is parsed, with user interaction required (visit a malicious page or open a malicious file). Affected versions...

CVE-2018-7517

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

OPENSUSE-SU-2018:0489-1 Security update for sox

This update for sox fixes the following issues: CVE-2017-11332: Fixed the startread function in wav.c, which allowed remote attackers to cause a DoS divide-by-zero via a crafted wav file. boo1081140 CVE-2017-11358: Fixed the readsamples function in hcom.c, which allowed remote attackers to cause ...

Denial of Service Vulnerability in Shooter Video Processing of 3GP Video Files

Shooter Video is a player, 3GP is a common video format, commonly used in mobile devices. A denial-of-service vulnerability exists in Shooter Video's handling of 3GP video files. An attacker can cause the program to crash by constructing a malformed 3GP file, which can lead to arbitrary code...

Multiple Memory Corruption Vulnerabilities in swftools Software swfbbox Module

SWFTools is a collection of utilities to work with Adobe Flash files SWF files. Multiple memory corruption vulnerabilities exist in the swfbbox module of the SWFTools software, which can cause an attacker to crash the program when working with malformed SWF files, and can lead to arbitrary code...