PT-2017-16440

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.3.26 GnuTLS versions 3.5.x prior to 3.5.8 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-memory error and crash, via a crafted OpenPGP certificate. Recommendations...

PT-2017-10112

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.25 Description The issue allows remote attackers to cause a denial of service, specifically an assertion failure, by providing a crafted file. This is related to the jas seq2d create function in jas seq.c...

CVE-2016-9138

PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::toString with DateInterval::wakeup...

PT-2016-3100

Name of the Vulnerable Software and Affected Versions GD Graphics Library versions prior to 2.2.4 Description The issue is caused by an integer overflow in the gd io.c component of the GD Graphics Library. This can be exploited by a remote attacker to potentially cause undefined impact by...

Apache Struts 2.5.x < 2.5.13 URLValidator Form Field Handling Remote DoS (S2-044)

The version of Apache Struts running on the remote host is 2.5.x prior to 2.5.13. It is, therefore, affected by a denial of service vulnerability in the URLValidator class due to improper handling of user-supplied input to the form field. An unauthenticated, remote attacker can exploit this, via ...

CVE-2016-6712

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

CVE-2016-6711

CVE-2016-6711 affects Android's Mediaserver libvpx component. A remote DoS can be triggered by a specially crafted file, causing device hang or reboot. Affected Android versions: 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01. No remediation details are provid...

CVE-2016-6491

Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service out-of-bounds read, memory leak, and crash via a crafted image...

CVE-2016-6711: Improper Input Validation

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

CVE-2016-9423

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer overflow in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...

CVE-2016-9432

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service memory corruption, segmentation fault, and crash via a crafted HTML page...

CVE-2016-9429

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the formUpdateBuffer function in w3m allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTML page...

CVE-2016-9625

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...

CVE-2016-9443: NULL Pointer Dereference

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote attackers to cause a denial of service segmentation fault and crash via a crafted HTML page...

OpenSSL 1.1.0a1.1.0b - Denial of Service

OpenSSL 1.1.0a1.1.0b - Denial of Service Exploit Title: OpenSSL 1.1.0a & 1.1.0b Heap Overflow Remote DOS vulnerability Date: 11-12-2016 Software Link: https://www.openssl.org/source/old/1.1.0/ Exploit Author: Silverfox Contact: http://twitter.com/Silverfox Website: https://www.silverf0x00.com/ CV...

PT-2016-7800

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-33 Description An issue was discovered that allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via a crafted HTML page. Recommendations For versions prior to 0.5.3-33,...

PT-2016-7805

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-33 Description An issue in w3m allows remote attackers to cause a denial of service through a crafted HTML page, resulting in an infinite loop and resource consumption. Recommendations For versions prior to 0.5.3-33...

PT-2016-7753

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-31 Description An issue in w3m allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, and possibly memory corruption via a crafted HTML page. Recommendations For versions...

PT-2016-7754

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-31 Description An issue in w3m allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via a crafted HTML page. Recommendations For versions prior to 0.5.3-31, update to...

PT-2016-7796

Name of the Vulnerable Software and Affected Versions w3m versions prior to 0.5.3-33 Description An issue in w3m allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, via a crafted HTML page. Recommendations For versions prior to 0.5.3-33, update to...