libcroco 'cr_input_new_from_uri' function denial of service vulnerability

libcroco is a CSS2 parsing library. A security vulnerability exists in the 'crinputnewfromuri' function in the cr-input.c file in libcroco versions 0.6.11 and 0.6.12. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read with the help of a...

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure or obtain confidential information.

The vulnerability of the Menus component in the Mac OS X operating system arises from reading data beyond the specified buffer limit. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or cause a service failure reading beyond the...

UBUNTU-CVE-2017-7960

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...

PT-2017-18027 · Gnome +4 · Libcroco +4

Name of the Vulnerable Software and Affected Versions: libcroco versions 0.6.11 through 0.6.12 Description: The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, by providing a crafted CSS file. This is due to a problem in the cr input new fro...

DEBIAN-CVE-2017-7885

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a during operation on a craft...

The vulnerability of the Mac OS X operating system and the iOS operating system allows attackers to trigger service interruptions or obtain confidential information.

The vulnerability of the FontParser component in the Mac OS X and iOS operating systems arises from reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to obtain confidential information or cause a service failure such as reading beyond the memory limit or...

The vulnerability of the FreeType library, which allows a perpetrator to trigger a service failure or cause other effects

The vulnerability of the parsecharstrings function in the type1/t1load.c file of the FreeType library does not guarantee that the font contains the glyph’s name. This vulnerability arises from reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cau...

The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure

The vulnerability of the setByteArray function in the tifdir.c library of LibTIFF arises from reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure reading beyond memory boundaries using a specially crafted tiff...

DEBIAN-CVE-2017-7697

In libsamplerate before 0.1.9, a buffer over-read occurs in the calcoutputsingle function in srcsinc.c via a crafted audio file...

UBUNTU-CVE-2017-7697

In libsamplerate before 0.1.9, a buffer over-read occurs in the calcoutputsingle function in srcsinc.c via a crafted audio file...

ALPINE-CVE-2017-7608

The eblobjectnotetypename function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

ALPINE-CVE-2017-7607

The handlegnuhash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

DEBIAN-CVE-2017-7612

The checksysvhash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

DEBIAN-CVE-2017-7608

The eblobjectnotetypename function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

DEBIAN-CVE-2017-7607

The handlegnuhash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

UBUNTU-CVE-2017-7608

The eblobjectnotetypename function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

PT-2017-17839 · Red Hat +3 · Elfutils +3

Name of the Vulnerable Software and Affected Versions: elfutils version 0.168 Description: The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted ELF file. This is due to the ebl object note type name functio...

PT-2017-3782 · Red Hat +3 · Elfutils +3

Name of the Vulnerable Software and Affected Versions: elfutils version 0.168 Description: The issue is related to a heap-based buffer over-read and application crash in the check group function. This can be exploited by remote attackers via a crafted ELF file, leading to a denial of service. The...

UBUNTU-CVE-2017-7612

The checksysvhash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

ALPINE-CVE-2017-7407

The ourWriteOut function in toolwriteout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a...