CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-11731

CVE-2017-11731 affects Ming 0.4.8 (libming) and is an invalid memory read in OpCode (used by isLogicalOp and decompileIF in util/decompile.c) that enables denial of service via a crafted file. Connected sources enumerate multiple Ming-related CVEs in 0.4.8 and document memory/buffer over-read and...

CVE-2017-11731

An invalid memory read vulnerability was found in the function OpCode called from isLogicalOp and decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file...

PT-2017-12208

Name of the Vulnerable Software and Affected Versions Ming version 0.4.8 Description A denial of service issue was discovered due to an invalid memory read in the OpCode function, which is called from isLogicalOp and decompileIF in util/decompile.c. This issue can be triggered by attackers using ...

LAME Denial of Service Vulnerability (CNVD-2017-20145)

LAME is LAME team developed a set of open source MP3 audio compression software . A denial of service vulnerability exists in the 'fillbufferresample' function in the libmp3lame/util.c file in LAME version 3.99.5. A remote attacker can exploit this vulnerability with a specially crafted wav file ...

PT-2017-16297

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Description The issue is related to insufficient validation of untrusted input in Skia, a component of Google Chrome, which allowed a remote attacker to perform an out of bounds memory read via a...

Code injection

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

DEBIAN-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

PT-2017-18902

Name of the Vulnerable Software and Affected Versions LAME version 3.99.5 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid memory read and application crash, by using a crafted wav file. This is due to a problem in the unpack read samples functio...

CVE-2017-9412: Improper Restriction of Operations within the Bounds of a Memory Buffer

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

CVE-2017-5091

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5097

Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5098

A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

MGASA-2017-0220 Updated libquicktime packages fix security vulnerabilities

A DoS in quicktimereadmoov function in moov.c via acrafted mp4 file was fixed CVE-2017-9122. An invalid memory read in lqtframeduration via a crafted mp4 file was fixed CVE-2017-9123. A NULL pointer dereference in quicktimematch32 via a crafted mp4 file was fixed CVE-2017-9124. A DoS in...

PT-2017-16298

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description A use after free in V8 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. This issue affects Google Chrome an...

PT-2017-16300

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description A use after free issue in Apps allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. This issue affects Google...

Updated c-ares packages fix security vulnerability

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way CVE-2017-1000381...

Apple macOS Sierra Kernel Security Bypass Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security bypass vulnerability exists in the Kernel component of Apple macOS Sierra versions prior to 10.12.6. The vulnerability can be exploited by an attacker to...

Multiple Apple Products WebKit Security Bypass Vulnerability (CNVD-2017-16988)

Apple iOS, iCloud for Windows, iTunes for Windows, and Safari are products of Apple Inc. iTunes for Windows is a suite of Windows-based media player applications. iTunes for Windows is the default browser that comes with Mac OS X and iOS operating systems. iTunes for Windows is an open source web...