IrfanView buffer overflow vulnerability (CNVD-2017-30395)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit. This vulnerability can be exploited b...

Qemu: i386: leakage of stack memory to guest in kvmvapic.c

An information-exposure flaw was found in Quick Emulator QEMU in Task Priority Register TPR optimizations for 32-bit Windows guests. The flaw could occur while accessing TPR. A privileged user inside a guest could use this issue to read portions of the host memory...

IrfanView buffer overflow vulnerability (CNVD-2017-14205)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause ...

IrfanView buffer overflow vulnerability (CNVD-2017-14207)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability with the help of specially crafted...

IrfanView .fpx file buffer overflow vulnerability (CNVD-2017-14134)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in version 4.47...

IrfanView buffer overflow vulnerability (CNVD-2017-14206)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability with the help of specially crafted...

IrfanView .rle file buffer overflow vulnerability (CNVD-2017-14161)

Irfanview is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit. An attacker can cause a denial of service via a crafted .rle file...

IrfanView buffer overflow vulnerability (CNVD-2017-14211)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to cause a denial of service with t...

IrfanView .fpx file buffer overflow vulnerability (CNVD-2017-14133)

IrfanView is an image viewer , it supports image browsing , image editing , image format conversion , etc. FPX Plugin is one of the programmable interface extension plugin . A buffer overflow vulnerability exists in the FPX Plugin version 4.47 in IrfanView version 4.44 32-bit. An attacker can...

IrfanView Buffer Overflow Vulnerability (CNVD-2017-14208)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in the TOOLS plugin version 4.50 used in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause ...

IrfanView FPX plugin buffer overflow vulnerability (CNVD-2017-15681)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion, etc. FPX Plugin is one of the programmable interface extensions. A buffer overflow vulnerability exists in IrfanView...

IrfanView .rle file buffer overflow vulnerability (CNVD-2017-14162)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.44 32-bit. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service with the help of...

DEBIAN-CVE-2017-3731

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; user...

ALPINE-CVE-2017-3731

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; user...

DEBIAN-CVE-2016-9384

Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table...

UBUNTU-CVE-2016-9382

Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service guest OS crash by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode...

ALPINE-CVE-2016-7944

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...

ALPINE-CVE-2016-7092

The getpagefroml3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables...

SolarWinds Kiwi Syslog Server Elevation of Privilege Vulnerability

SolarWinds network security management software products. The application can be installed on a windows system with the option to select the default security service. The default installation path "C:\Program Files x86" is selected when installing the 32-bit application, which may allow an...

kernel: compat IPT_SO_SET_REPLACE setsockopt

A flaw was discovered in processing setsockopt for 32 bit processes on 64 bit systems. This flaw will allow attackers to alter arbitrary kernel memory when unloading a kernel module. This action is usually restricted to root-privileged users but can also be leveraged if the kernel is compiled wit...