PT-2017-18748 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer over-read in the GET COLOR function, located in color.c. This occurs at line 18, column 11, of the libautotrace.a file in AutoTrace. Recommendations: For...

PT-2017-18776 · None +2 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function. This function is located in the input-tga.c file. The estimated number of...

PT-2017-18777 · Autotrace +1 · Autotrace +2

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function, located in input-tga.c. This function is part of the libautotrace.a library in...

PT-2017-18753 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer over-read in the ReadImage function, located in the input-bmp.c file. This function is part of the libautotrace.a library in AutoTrace. Recommendations: For...

PT-2017-18747 · Autotrace Team +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer over-read in the GET COLOR function, located in color.c. This function is part of the libautotrace.a library in AutoTrace. Recommendations: For AutoTrace versio...

PT-2017-18734 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer over-read in the pnm load raw function, located in the input-pnm.c file. This function is part of the libautotrace.a library in AutoTrace. The over-read occurs ...

PT-2017-18746 · Autotrace Team +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer over-read in the GET COLOR function, located in color.c. This function is part of the libautotrace.a library in AutoTrace. Recommendations: For AutoTrace versio...

PT-2017-2616 · Libtiff +3 · Libtiff +3

Name of the Vulnerable Software and Affected Versions: LibTIFF versions 4.0.6 through 4.0.7 Description: The issue arises from the program's failure to verify that biWidth and biHeight in the bitmap-information header of BMP images match the actual input. This leads to a heap-based buffer...

UBUNTU-CVE-2017-9117

In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the...

UBUNTU-CVE-2017-9053

An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfreadlocexprop is due to a failure to check a pointer for being in bounds in a few places in this function...

UBUNTU-CVE-2017-9054

An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In dwarfdecodesleb128chk a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read...

UBUNTU-CVE-2017-9055

An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarfformsdata a few data types were not checked for being in bounds, leading to a heap-based buffer over-read...

DEBIAN-CVE-2017-9049

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398...

DEBIAN-CVE-2017-9052

An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfformsdata is due to a failure to check a pointer for being in bounds in a few places in this function and a failure in a check in dwarfattrlist...

DEBIAN-CVE-2017-9058

In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c...

UBUNTU-CVE-2017-9052

An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfformsdata is due to a failure to check a pointer for being in bounds in a few places in this function and a failure in a check in dwarfattrlist...

DEBIAN-CVE-2017-9053

An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfreadlocexprop is due to a failure to check a pointer for being in bounds in a few places in this function...

DEBIAN-CVE-2017-9054

An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In dwarfdecodesleb128chk a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read...

DEBIAN-CVE-2017-9050

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839...

DEBIAN-CVE-2017-9055

An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarfformsdata a few data types were not checked for being in bounds, leading to a heap-based buffer over-read...