CVE-2017-12441

CVE-2017-12441 affects minidjvu 0.8, where the function row_is_empty in base/4bitmap.c:274 can trigger a denial of service due to an invalid memory read when processing a crafted DjVu file. The vulnerability is a DoS vector; the provided documents describe the root cause but do not include explic...

PT-2017-12554

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the row is empty function in the base/4bitmap.c file, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu file...

PT-2017-12556

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the mdjvu bitmap pack row function in the base/4bitmap.c file, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu file...

PT-2017-12557

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the mdjvu bitmap get bounding box function in the base/4bitmap.c file, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted...

PT-2017-12558

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the JB2BitmapCoder::code row by refinement function in minidjvu, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu...

PT-2017-12555

Name of the Vulnerable Software and Affected Versions minidjvu version 0.8 Description The issue is related to the row is empty function in base/4bitmap.c at line 272, which can cause a denial of service due to an invalid memory read and application crash when processing a crafted djvu file...

USN-3391-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting XSS attacks, bypass sandbox restrictions, obtain sensitive information, spoof the origin of modal...

Debian DSA-3939-1 : botan1.10 - security update

Aleksandar Nikolic discovered that an error in the x509 parser of the Botan crypto library could result in an out-of-bounds memory read, resulting in denial of service or an information leak if processing a malformed certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

[SECURITY] [DSA 3939-1] botan1.10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3939-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2017 https://www.debian.org/security/faq -...

CVE-2017-11358

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

Debian: Security Advisory (DSA-3939-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WildMIDI 0.4.2 - Multiple Vulnerabilities

Exploit for linux platform in category dos / poc wildmidi multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= WildMIDI is a simple software midi player which has a core softsynth library that can be use with other applications.The WildMIDI librar...

WildMIDI 0.4.2 - Multiple Vulnerabilities

WildMIDI 0.4.2 - Multiple Vulnerabilities wildmidi multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= WildMIDI is a simple software midi player which has a core softsynth library that can be use with other applications.The WildMIDI library uses...

WildMIDI 0.4.2 - Multiple Vulnerabilities

wildmidi multiple vulnerabilities ================ Author : qflb.wu =============== Introduction: ============= WildMIDI is a simple software midi player which has a core softsynth library that can be use with other applications.The WildMIDI library uses Gravis Ultrasound patch files to convert...

GNU Binutils '_bfd_vms_slurp_egsd' function arbitrary memory read vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

DEBIAN-CVE-2017-12453

The bfdvmsslurpeeom function in libbfd.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file...

UBUNTU-CVE-2017-12454

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...

Design/Logic Flaw

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...

CVE-2017-12454

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...

CVE-2017-12454

The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file...