XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from a segmentation violation contained in DCTStream::getChar in /xpdf/Stream.cc...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x4fe954 file...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x6badae file...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the file /multiarch/memmove-vec-unaligned-erms...

PT-2022-22859 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation issue was discovered in OTFCC. The issue can be triggered via the /release-x64/otfccdump+0x5266a8 endpoint. Recommendations: For OTFCC version 0.10.4, consider restricting access to t...

PT-2022-22860 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation was discovered in OTFCC, which can be triggered via the /release-x64/otfccdump+0x6b6a8f endpoint. Recommendations: For version 0.10.4, at the moment, there is no information about a...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in the extractFrame of the /readers/swf.c file...

SWFTools 代码问题漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A code issue vulnerability exists in SWFTools that stems from a segmentation violation in DCTStream::getChar in the /xpdf/Stream.cc file...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x703969 file...

PT-2022-24303 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue was identified in XPDF commit ffaf11c. Recommendations: At the moment, there ...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in the gfxlinegetbbox of the /lib/gfxtools.c file...

PT-2022-22857 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation was discovered in OTFCC via the /multiarch/memmove-vec-unaligned-erms.S endpoint. Recommendations: For OTFCC version 0.10.4, consider restricting access to the...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from DCTStream::readMCURow in /xpdf/Stream.cc contains a segmentation violation...

OTFCC 代码问题漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /x8664-linux-gnu/libc.so.6+0xbb384 file...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x5266a8 file...

OTFCC 代码问题漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A code issue vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x6b6a8f file...

OSV-2022-715 Segv on unknown address in jpeg_read_scanlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.htmldecode-jpeg-compressed-blp1-data-in-original-mode Crash type: Segv on unknown address Crash state: jpegreadscanlines ImagingJpegDecode decode...

MariaDB 10.7.0 < 10.7.5 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.7.5 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...

GLSA-202208-22 : xterm: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-22 xterm: Multiple Vulnerabilities - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence. CVE-2021-27135 ...

GLSA-202208-16 : faac: Denial of service

The remote host is affected by the vulnerability described in GLSA-202208-16 faac: Denial of service - An invalid memory address dereference was discovered in the huffcode function libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2. The vulnerability causes a segmentation fault and...