CVE-2017-12142

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12142

In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

Sound eXchange 'read_samples' Function Denial of Service Vulnerability

Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A security vulnerability exists in the 'readsamples' function of the hcom.c file in SoX version 14.4.2. A remote attacker can exploit this...

PT-2017-12363

Name of the Vulnerable Software and Affected Versions ytnef version 1.9.2 Description A denial of service issue was discovered, allowing attackers to cause a denial of service via a crafted file. This issue is related to an invalid memory read vulnerability in the SwapDWord function in ytnef.c...

gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps

The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...

gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...

gstreamer: Invalid memory read in g_type_check_instance_is_fundamentally_a

The gstdecodechainfreeinternal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via an invalid file, which triggers an incorrect unref call...

gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm

The gstpsdemuxparsepsm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service invalid memory read and crash via vectors involving PSM parsing...

Kernel: kvm: use after free in complete_emulated_mmio

arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service use-after-free via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt...

chromium-browser: use after free in indexeddb

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

chromium-browser: use after free in chrome apps

A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

DEBIAN-CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

Code injection

The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...

CVE-2017-11119

The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...

CVE-2017-11119

Summary (CVE-2017-11119) : The vulnerability affects Nosefart 2.9-mls, in the chk_mem_access function of cpu/nes6502/nes6502.c within libnosefart.a. A crafted NSF file can cause a denial of service by triggering an invalid memory read and application crash. The linked (connected) documents consis...

CVE-2017-11119

The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities

Sound eXchange SoX 14.4.2 - Multiple Vulnerabilities Sound eXchange SoX multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= SoX is a cross-platform Windows, Linux, MacOS X, etc. command line utility that can convert various formats of computer...