Stack overflow

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote...

CVE-2019-13279

TRENDnet TEW-827DRU devices running firmware up to and including 2.04B03 are affected by multiple stack-based buffer overflows in the setup wizard input processing. This vulnerability allows an unauthenticated attacker to execute arbitrary code and can be exploited from the local intranet or remo...

CVE-2019-13279

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote...

CVE-2019-13276

TRENDnet TEW-827DRU devices with firmware 2.04B03 or earlier are affected by a stack-based buffer overflow in the ssi binary. An unauthenticated attacker can cause arbitrary code execution by sending a sufficiently long query string via POST to valid cgi, txt, asp, or js files, potentially from a...

CVE-2018-14496

Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocalbuff4326, and setgetparam.cgi. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or...

CVE-2018-14496

CVE-2018-14496 affects Vivotek FD8136 devices. The vulnerability is a stack-based buffer overflow in the web CGI endpoint “/set_getparam.cgi” related to the use of sprintf and a local buffer (vlocal_buff_4326), enabling remote memory corruption and remote code execution. Multiple sources corrobor...

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

CVE-2018-14550

CVE-2018-14550 corresponds to a stack-based buffer overflow in libpng 1.6.35’s PNM decoding path, specifically in get_token() within pnm2png.c of pnm2png. The issue is triggered during third-party PNM decoding and is documented across multiple advisories (EulerOS, Gentoo GLSA, GN/NET, etc.). The ...

CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function gettoken in pnm2png.c in pnm2png...

Microsoft DirectWrite / AFDKO - Stack-Based Buffer Overflow in do_set_weight_vector_cube for Large nAxes

-----===== Background =====----- AFDKO Adobe Font Development Kit for OpenType is a set of tools for examining, modifying and building fonts. The core part of this toolset is a font handling library written in C, which provides interfaces for reading and writing Type 1, OpenType, TrueType to some...

CVE-2019-13280

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or traceroute attempt. This allows an authenticated user to execute arbitrary code. The exploit can b...

Stack overflow

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or traceroute attempt. This allows an authenticated user to execute arbitrary code. The exploit can b...

Debian: Security Advisory (DLA-1849-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4477-1 : zeromq3 - security update

Fang-Pen Lin discovered a stack-based buffer-overflow flaw in ZeroMQ, a lightweight messaging kernel library. A remote, unauthenticated client connecting to an application using the libzmq library, running with a socket listening with CURVE encryption/authentication enabled, can take advantage of...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The function WritePNMImage in coders/pnm.c leads to a stack-based buffer overflow while converting an image to PGM image...

CVE-2019-13362

Codedoc v3.2 has a stack-based buffer overflow in addvariable in codedoc.c, related to codedocstrlcpy...

CVE-2019-13362

Codedoc v3.2 has a stack-based buffer overflow in addvariable in codedoc.c, related to codedocstrlcpy...

CVE-2019-13362

CVE-2019-13362 affects Codedoc v3.2. Affected component: codedoc.c, function add_variable. Root cause: a stack-based buffer overflow related to codedoc_strlcpy. Consequences stated across sources point to a potential overflow (impacting confidentiality, integrity, and availability as implied by t...