CVE-2018-5684

In Libav through 12.2, there is an invalid memcpy call in the ffmovreadstsdentries function of libavformat/mov.c. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault and program failure with a crafted avi file...

CVE-2018-5684

CVE-2018-5684 affects Libav up to version 12.2. The vulnerability is an invalid memcpy call in the function ff_mov_read_stsd_entries within libavformat/mov.c. A remote attacker can cause a denial of service (segmentation fault) and program failure by supplying a crafted AVI file. No patch/version...

PoDoFo Denial of Service Vulnerability (CNVD-2018-03971)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the 'PdfMemoryOutputStream::Write' function in the base/PdfOutputStream.cpp file in PoDoFo version 0.9.5, which stems from a program that does not properly validate the 'memcp...

CVE-2018-5308

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function base/PdfOutputStream.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-5308

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function base/PdfOutputStream.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

Microsoft Windows win32kbase!NtQueryCompositionInputQueueAndTransform Kernel Stack Memory Disclosure

The win32k!NtQueryCompositionInputQueueAndTransform system call may disclose portions of uninitialized kernel stack memory to user-mode clients on Windows 10. Windows Kernel stack memory disclosure in win32kbase!NtQueryCompositionInputQueueAndTransform We have discovered that the...

UBUNTU-CVE-2017-1000185

In SWFTools, a memcpy buffer overflow was found in gif2swf...

CVE-2017-1000176

CVE-2017-1000176 affects SWFTools, specifically the swfc component, where a memcpy buffer overflow is reported. The root cause is a memcpy-based overflow in swfc, and multiple sources describe it as enabling a denial-of-service scenario. The CVSS data from NVD indicates a Medium base score (4.3) ...

CVE-2017-1000185

Removed by vendor...

CVE-2017-1000176

Removed by vendor...

CVE-2017-1000176

In SWFTools, a memcpy buffer overflow was found in swfc...

SWFTools memcpy buffer overflow vulnerability

SWFTools is a suite of open source software tools for creating and manipulating SWF files. A memcpy buffer overflow vulnerability exists in gif2swf in SWFTools. An attacker could exploit this vulnerability to cause a denial of service...

Microsoft Internet Explorer 11 jscript!JsErrorToString Use-After-Free

Microsoft IE11: use-after-free in jscript!JsErrorToString CVE-2017-11810 There is a use-after-free in jscript.dll library that can be exploited in IE11. jscript.dll is an old JavaScript library that was used in IE 8 and back. However, IE11 can still load it if put into IE8 compatibility mode and ...

wxwidgets/zip: Memcpy-param-overlap in wxZipInputStream::FindEndRecord

Project: https://github.com/wxWidgets/wxWidgets.git Detailed report: https://oss-fuzz.com/testcase?key=6189258093101056 Project: wxwidgets Fuzzer: libFuzzerwxwidgetszip Fuzz target binary: zip Job Type: libfuzzerasanwxwidgets Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

IBM Domino KeyView PDF Filter Stream Length Code Execution Vulnerability(CVE-2016-0278)

Description An integer overflow vulnerability present in the PDF filter of KeyView as used by Domino can lead to process crash and possible arbitrary code execution. Tested Versions KeyView 10.16 as used by IBM Domino 9.0.1 Product URLs http://www-03.ibm.com/software/products/en/ibmdomino Details...

Microsoft Windows Kernel Pool nt!RtlpCopyLegacyContextX86 Memory Disclosure Vulnerability

The Microsoft Windows kernel pool suffers from a nt!RtlpCopyLegacyContextX86 related memory disclosure vulnerability. Windows Kernel pool memory disclosure in nt!RtlpCopyLegacyContextX86 CVE-2017-11784 One kernel memory disclosure in the exception handling code has already been discovered and...

ffmpeg: Memcpy-param-overlap in xan_wc3_copy_pixel_run

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6393461273001984 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDXANWC3fuzzer Fuzz target binary: ffmpegAVCODECIDXANWC3fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

KingScada AlarmServer 3.1.2.13 Buffer Overflow

require 'msf/core' class MetasploitModule 'KingScada AlarmServer Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in KingScada 'James Fitts' , 'License' = MSFLICENSE, 'References' = 'CVE', '2014-0787' , 'ZDI', '14-071' , 'URL',...

haneWIN DNS Server 1.5.3 Buffer Overflow Exploit

This Metasploit module exploits a buffer overflow vulnerability found in haneWIN DNS Server versions 1.5.3 and below. The vulnerability is triggered by sending an overly long packet to the victim server. A memcpy function blindly copies user supplied data to a fixed size buffer leading to remote...

openSUSE Security Update : mpg123 (openSUSE-2017-1035)

This update for mpg123 fixes the following issues : - Update to version 1.25.6 - Hotfix for bug 255: Overflow reading frame data bits in layer II decoding. Now, all-zero data is returned if the frame data is exhausted. This might have a slight impact on performance, but not easily measurable so...