304 matches found
CVE-2017-3738
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attack...
CVE-2017-3738
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attack...
DEBIAN-CVE-2017-1000229
Integer overflow bug in function minitiffreadinfo of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service...
CVE-2017-1000229
Integer overflow bug in function minitiffreadinfo of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service...
CVE-2017-1000229
Integer overflow bug in function minitiffreadinfo of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service...
UBUNTU-CVE-2017-12864
In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...
ALPINE-CVE-2012-6706
A VMSFDELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the...
UBUNTU-CVE-2017-7976
Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2imagecompose function in jbig2image.c during operations on a crafted .jb2 file, leading to a denial of service application crash or disclosure of sensitive information from process memory...
Artifex Software MuJS Buffer Overflow Vulnerability (CNVD-2017-05278)
Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A buffer overflow vulnerability exists in the 'jsstackoverflow' function of the jsrun.c file in Artifex Software MuJS. An...
CVE-2016-10272
LibTIFF 4.0.7 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tifnext.c:64:9...
Amazon Linux: Security Advisory (ALAS-2016-695)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : openssl (ALAS-2016-695)
A vulnerability was discovered that allows a man-in-the-middle attacker to use a padding oracle attack to decrypt traffic on a connection using an AES CBC cipher with a server supporting AES-NI. CVE-2016-2107 , Important It was discovered that the ASN.1 parser can misinterpret a large universal t...
UBUNTU-CVE-2015-4522
The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors, related to an "overflow."...
libtiff 3.9.5 - Integer Overflow
/ Exploit Title: libtiff include include include "tiffio.h" int tiffintegeroverflowtest TIFF tif = TIFFOpen"/home/x90c/samplespp.tif", "r"; int samples = 0; / for instance, TIFFGetField library function will called with malicious samplesperpixel field value TIFFGetField got segfault! /...
DEBIAN-CVE-2012-4433
Multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large 1 width or 2 height value in a Portable Pixel Map ppm image, which triggers a...
flash-plugin: arbitrary code exec via integer overflow in copyRawDataTo method in Matrix3D class
Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments...
CentOS Update for xen CESA-2011:1401 centos5 i386
Check for the Version of xen OpenVAS Vulnerability Test CentOS Update for xen CESA-2011:1401 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Fedora 14 : tor-0.2.1.29-1400.fc14 (2011-0642)
Mon Jan 17 2011 Enrico Scholz - 0.2.1.29-1400 - updated to 0.2.1.29 SECURITY - CVE-2011-0427: heap overflow bug, potential remote code execution - Tue Dec 21 2010 Luke Macken - 0.2.1.28-1400 - updated to 0.2.1.28 SECURITY: fixes a remotely exploitable heap overflow bug - Fri Nov 26 2010 Enrico...
Fedora 12 : opendchub-0.8.2-2.fc12 (2010-6415)
Fix for stack overflow bug. CVE ID: CVE-2010-1147 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...