CVE-2014-9809

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted xwd image...

CVE-2014-9808

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted dpc image...

CVE-2014-9809

CVE-2014-9809 affects ImageMagick; the vulnerability allows remote attackers to cause a denial of service (segmentation fault/application crash) via a crafted xwd image. The provided connected documents corroborate the CVE in the ImageMagick context (e.g., Nessus/RHEL advisories listing CVE-2014-...

CVE-2014-9810

The dpx file handler in ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a malformed dpx file...

CVE-2014-9810

The dpx file handler in ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a malformed dpx file...

CVE-2014-9811

The xwd file handler in ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a malformed xwd file...

CVE-2014-9805

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted pnm file...

CVE-2014-9808

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted dpc image...

CVE-2014-9809

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted xwd image...

CVE-2014-9811

CVE-2014-9811 affects ImageMagick via the xwd file handler. The vulnerability allows remote attackers to trigger a denial of service (segmentation fault/application crash) by processing a crafted xwd file. Public documents in the connected set corroborate the existence of this issue and describe ...

Oracle Linux 6 : glibc (ELSA-2017-0680)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0680 advisory. - Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function 1358015. - Fix CVE-2015-8778 glibc: Integer overflow in hcreate and hcreater...

SUSE-RU-2017:0843-1 Recommended update for ImageMagick

This update for ImageMagick provides the following fixes: - Fix segmentation fault when wrong parameter supplied to conjure command bsc1027480. - Improve CVE-2016-7518 patch to fix sun coder bsc1028079 comment 5...

Linux 3.16.0-28 Integer Overflow

Title: Linux kernel 3.16.0-28 - Integer overflow + Credits / Discovery: Nassim Asrir + Author Email: [email protected] || https://www.linkedin.com/in/nassim-asrir-b73a57122/ + Author Company: Henceforth + CVE: CVE-2017-7286 Vendor: =============== https://www.kernel.org/ Vulnerability Type:...

shopify-scripts: Crash in ary_concat()

The code above raises a segmentation fault both in mruby and mruby-engine N case when nil -do end def eend end ASAN report : line 1:3: '' interpreted as argument prefix ASAN:SIGSEGV ================================================================= ==111090==ERROR: AddressSanitizer: SEGV on unknow...

Linux XFBurn Stack-based Buffer Overflow Vulnerability

Exploit for linux platform in category dos / poc Exploit Title: Linux XFBurn Stack-based Buffer Overflow Type: CWE-121 Exploit Author: Hosein Askari FarazPajohan Vendor HomePage: http://goodies.xfce.org/projects/applications/xfburn Version : 0.5.4 Tested on: Ubuntu 17.04 Date: 24-03-2017 Category...

APNGDis 2.8 - filename Stack Buffer Overflow Exploit

Exploit for multiple platform in category dos / poc Exploit Title: APNGDis filename Buffer Overflow Date: 14-03-2017 Exploit Author: Alwin Peppels Vendor Homepage: http://apngdis.sourceforge.net/ Software Link: https://sourceforge.net/projects/apngdis/files/2.8/ Version: 2.8 Tested on: Linux Debi...

glibc: Segmentation fault caused by passing out-of-range data to strftime()

It was found that out-of-range time values passed to the strftime function could result in an out-of-bounds memory access. This could lead to application crash or, potentially, information disclosure...

PCRE2 and PCRE Denial of Service Vulnerabilities (CNVD-2017-03451)

PCRE Perl Compatible Regular Expressions and PCRE2 are both products developed by software developer Philip Hazel. The former is an open source regular expression library written in C, and the latter is an API for modifying PCRE. A denial of service vulnerability exists in libpcre2 in PCRE2 versi...

ALPINE-CVE-2017-7186

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

PT-2017-17565 · Pcre +3 · Pcre2 +4

Name of the Vulnerable Software and Affected Versions: PCRE versions 8.40 PCRE2 versions 10.23 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation violation for read access and an application crash, by triggering an invalid Unicode property...