Double free

Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors...

CVE-2016-6164

Integer overflow in the movbuildindex function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size...

CVE-2016-3177

Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors...

CVE-2016-6164

Integer overflow in the movbuildindex function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size...

CVE-2016-6164

Integer overflow in the movbuildindex function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size...

CVE-2016-3177

Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors...

PT-2017-2399

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.8.8 FFmpeg versions 3.0.x prior to 3.0.3 FFmpeg versions 3.1.x prior to 3.1.1 Description The issue is caused by an integer overflow in the mov build index function, which can be exploited by remote attackers via...

CVE-2016-6517: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E encoded dot dot in the minifierBundleDir parameter to barebone.jsp...

CVE-2016-7036: Undefined Security Weakness

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

CVE-2016-7996

Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries...

CVE-2016-9809

Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...

CVE-2016-2090

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow...

PT-2017-16546

Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description A double free vulnerability exists in the magick/profile.c component of ImageMagick, allowing remote attackers to have an unspecified impact via a crafted file. Recommendations At the...

PT-2017-7753

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.24.6 libgit2 versions 0.25.x prior to 0.25.1 Description A buffer overflow issue exists in the git pkt parse line function in transports/smart pkt.c, which is part of the Git Smart Protocol support in libgit2. This...

GLSA-201701-18 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-18 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

CVE-2016-10063

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file, related to extend validity...

CVE-2016-8670

Integer signedness error in the dynamicGetbuf function in gdiodp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact via...

CVE-2016-10094

Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image...

PT-2016-4576

Name of the Vulnerable Software and Affected Versions LibTIFF versions 3.9.3 through 4.0.6 Description The issue is related to a heap-based buffer overflow in the readContigStripsIntoBuffer function in tif unix.c. This allows remote attackers to have an unspecified impact via a crafted image...

CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...