CVE-2019-7578

CVE-2019-7578 (InitIMA_ADPCM in SDL_wave.c) affects SDL 1.2.15 and 2.x up to 2.0.9, causing a heap-based buffer over-read. The connected advisories indicate potential for arbitrary code execution in some contexts (notably Arch Linux and AlmaLinux descriptions). Public fixes are available via vend...

CVE-2019-7578

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c...

CVE-2019-7576

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c outside the wNumCoef loop...

CVE-2019-7576

SDL (libsdl1.2/SDL2) up to affected 1.2.x/2.x versions has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop). Exploitation can enable arbitrary code execution via crafted media files. Upgrades to SDL2 2.0.10+ and SDL 1.2.15-13+/libsdl1.2 1.2.15-13+ are ...

CVE-2019-7572

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c...

CVE-2019-7575

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in audio/SDLwave.c...

CVE-2019-7576

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c outside the wNumCoef loop...

CVE-2019-7578

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c...

CVE-2019-7577

SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDLLoadWAVRW in audio/SDLwave.c...

PT-2019-5615

Name of the Vulnerable Software and Affected Versions SDL versions 1.2.15 and earlier SDL versions 2.0.9 and earlier Description The issue is related to a buffer over-read in the SDL LoadWAV RW function in the audio/SDL wave.c file of the Simple DirectMedia Layer library. This can be exploited by...

PT-2019-5611

Name of the Vulnerable Software and Affected Versions SDL Simple DirectMedia Layer versions 1.2.15 and earlier SDL Simple DirectMedia Layer versions 2.x through 2.0.9 Description The issue is related to a buffer over-read in the IMA ADPCM nibble function, located in audio/SDL wave.c, which can be...

PT-2019-5616

Name of the Vulnerable Software and Affected Versions Simple DirectMedia Layer versions 1.2.15 and earlier Simple DirectMedia Layer versions 2.x through 2.0.9 Description The issue is related to a heap-based buffer over-read in the InitIMA ADPCM function in audio/SDL wave.c of the Simple...

PT-2019-5613

Name of the Vulnerable Software and Affected Versions SDL versions 1.2.15 and earlier SDL versions 2.x through 2.0.9 Description The issue is related to a heap-based buffer overflow in the MS ADPCM decode function of the Simple DirectMedia Layer library, located in audio/SDL wave.c. This can be...

PT-2019-1951

Name of the Vulnerable Software and Affected Versions SDL versions 1.2.0 through 1.2.15 SDL versions 2.0.0 through 2.0.9 Description The issue is related to a heap-based buffer over-read in the InitMS ADPCM function in the audio/SDL wave.c file of the Simple DirectMedia Layer library. This can be...

CVE-2018-19371

The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system...

Design/Logic Flaw

The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system...

CVE-2018-19371

CVE-2018-19371 concerns the SDL Web Content Manager (Build 8.5.0) where the SaveUserSettings web service is vulnerable to an XML External Entity (XXE) injection. The underlying issue allows an attacker to read sensitive files from the server, leveraging XML values passed to the SaveUserSettings e...

PT-2019-9795

Name of the Vulnerable Software and Affected Versions SDL Web version 8.5.0 Description The issue concerns an XXE vulnerability in the SaveUserSettings service of Content Manager, allowing unauthorized access to sensitive system files. Recommendations For SDL Web version 8.5.0, update to a versio...

CVE-2018-19371: Improper Restriction of XML External Entity Reference

The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system...

SDL Web Content Manager 8.5.0 - XML External Entity Injection Vulnerability

Exploit for php platform in category web applications Author Information Author : Ahmed Elhady Mohamed twitter : @AhmedELhady Company : Canon Security Date : 25/11/2018 Software Information Affected Software : SDL Web Content Manager Version: Build 8.5.0 Vendor: SDL Tridion Software website :...