161 matches found
Code injection
In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...
Integer overflow
Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...
CVE-2017-14636
Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...
UBUNTU-CVE-2017-14637
In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...
UBUNTU-CVE-2017-14636
Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...
CVE-2017-14637
CVE-2017-14637 affects sam2p 0.49.3, where an invalid read of size 2 in parse_rgb() inside in_xpm.cpp can also cause a write to an illegal address. This is documented in multiple feeds (including OSV/DEBIAN notes for sam2p vulnerabilities) and is tied to the set of related CVEs in sam2p 0.49.3. E...
CVE-2017-14636
CVE-2017-14636 affects sam2p 0.49.3. An integer overflow leads to a loop that may execute 0xffffffff times, causing an invalid read of size 1 in Image::Indexed::sortPal (image.cpp) and memory corruption from writing to d[0xfffffffe]. Downstream advisories (e.g., Debian DLA-1127-1, Mageia MGASA-20...
CVE-2017-14637
In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...
CVE-2017-14636
Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...
sam2p integer overflow vulnerability
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. An integer overflow vulnerability exists in the 'pcxLoadImage24' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause an invalid write...
sam2p denial of service vulnerability
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A denial of service vulnerability exists in the 'inxpmreader' function of inxpm.cpp in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of service crash...
sam2p heap buffer overflow vulnerability (CNVD-2017-34028)
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A heap buffer overflow vulnerability exists in the 'pcxLoadRaster' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of...
sam2p heap buffer overflow vulnerability
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A heap buffer overflow vulnerability exists in the 'pcxLoadImage24' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of...
CVE-2017-14629
In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element...
UBUNTU-CVE-2017-14629
In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element...
CVE-2017-14631
In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...
Heap overflow
In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...
Integer overflow
In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp, leading to an invalid write operation...