CVE-2017-7601

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7614

elflink.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...

CVE-2017-7600

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-6194

The relocs function in libr/bin/p/binbflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file...

CVE-2017-2428

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component. It allows remote HTTP/2 servers to have an...

CVE-2017-2428

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component. It allows remote HTTP/2 servers to have an...

PT-2017-1765

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 macOS versions prior to 10.12.4 tvOS versions prior to 10.2 watchOS versions prior to 3.2 Description The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component, allowing remote HTTP/2 servers to have a...

Heap overflow

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9824...

Heap overflow

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file...

CVE-2014-9821

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file...

CVE-2014-9826

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files...

CVE-2014-9817

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file...

CVE-2014-9819: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9823...

CVE-2014-9825: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9824...

CVE-2014-9820: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file...

Null pointer dereference

The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes...

CVE-2017-6458

Removed by vendor...

PT-2017-17082

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p10 NTP versions 4.3.x prior to 4.3.94 Description The issue allows local users to have an unspecified impact. This is related to an argument with multiple null bytes. Recommendations For versions prior to 4.2.8p10,...

CVE-2017-6459: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via vectors related to an argument with multiple null bytes...

CVE-2017-7263

The bmreadbodybmp function in bitmapio.c in Potrace 1.14 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for...