4405 matches found
CVE-2015-8898: NULL Pointer Dereference
The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image file...
PT-2018-5095
Name of the Vulnerable Software and Affected Versions nss versions prior to 3.30 Description The issue allows for a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA. Recommendations For versions prior to 3.30, update to version 3.30 or later...
CVE-2016-10189
BitlBee before 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list...
CVE-2016-10171: Out-of-bounds Read
The unreorderchannels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted WV file...
CVE-2017-5668: NULL Pointer Dereference
bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for...
PT-2017-1436
Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.1 Description A denial of service issue exists due to insufficient input validation in the Mediaserver component, allowing an attacker to cause a device hang or reboot using a specially crafted file. This iss...
CVE-2016-9740: Undefined Security Weakness
IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested by an actor. IBM Reference : 1999556...
CVE-2016-10066
Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2017-5195
Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted ANSI x8 color code...
CVE-2016-10063
Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file, related to extend validity...
PT-2017-3972
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 53 Firefox ESR versions prior to 52.1 Thunderbird versions prior to 52.1 Description The issue is related to a use-after-free vulnerability, which can cause a potentially exploitable crash when holding a selection...
PT-2017-17030
Name of the Vulnerable Software and Affected Versions radare2 version 1.2.1 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a crafted DEX file. This is due to a problem in the dex loadcode function...
CVE-2017-5981
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file...
CVE-2016-9822
Integer overflow in libavcodec/mpeg12dec.c in libav 11.8 allows remote attackers to cause a denial of service crash via a crafted file...
CVE-2017-5979: NULL Pointer Dereference
The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
PT-2017-16713
Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a crafted file. This is due to a problem in the PoDoFo::PdfPage::GetInheritedKeyFromObject function...
PT-2017-16712
Name of the Vulnerable Software and Affected Versions mp3splt version 2.6.2 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a crafted file. This typically has no risk as the crash of this command-line program has n...
CVE-2016-10207: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service invalid memory access and crash by terminating a TLS handshake early...