5983 matches found
libtiff: invalid assertion
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...
OpenOffice Impress MetaActions Arbitrary Read/Write Vulnerability
OpenOffice.org is a cross-platform office software suite that runs on Windows, Linux, MacOS X X11 and Solaris. Openoffice has an out-of-bounds vulnerability in the handling of MetaActions. An attacker can trigger the vulnerability by causing out-of-bounds reads and writes with an Open Office...
PHP 7.0.8 / 5.6.23 / 5.5.37 - bzread() Out-of-Bounds Write
Exploit for php platform in category dos / poc ''' PHP 7.0.8, 5.6.23 and 5.5.37 does not perform adequate error handling in its bzread' function: php-7.0.8/ext/bz2/bz2.c ,---- | 364 static PHPFUNCTIONbzread | 365 | ... | 382 ZSTRLENdata = phpstreamreadstream, ZSTRVALdata, ZSTRLENdata; | 383...
Microsoft Windows Printing Backend Handler Elevation of Privilege Vulnerability
Microsoft Windows is a series of operating systems released by Microsoft.Print Spooler service is one of the print service components. An elevation of privilege vulnerability exists in the Microsoft Windows Print Spooler Server, which arises from the program failing to properly allow arbitrary...
The vulnerability of Cisco Nexus 1000V software allows a malicious individual to gain access to confidential information.
The GNU Bash command shell, as of version 4.3 bash43-025, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other unconfirmed actions. Security...
UBUNTU-CVE-2016-5688
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger 1 a heap-based buffer overflow in the SetPixelIndex function or an invali...
ImageMagick WPG Parser Heap Overflow Vulnerability
ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A security vulnerability exists in ImageMagick's WPG parser, which can be exploited by attackers to cause a heap overflow and random invalid memory writes...
GNU gcc Memory Misreference Vulnerability
GNU gcc GNU Compiler Collection is an open source compiler for programming languages developed by the GNU Project. A memory misreference vulnerability exists in GNU gcc. An attacker can exploit the vulnerability to cause invalid writes with the help of the 'ktypevec' parameter...
GNU gcc memory misreference vulnerability (CNVD-2016-03093)
GNU gcc GNU Compiler Collection is an open source compiler for programming languages developed by the GNU Project. A memory misreference vulnerability exists in GNU gcc. An attacker can exploit the vulnerability to cause invalid writes with the help of the 'btypevec' parameter...
CVE-2016-0889
An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname...
PT-2018-7199
Name of the Vulnerable Software and Affected Versions: Zabbix Server versions 2.4.x Description: The issue allows specifically crafted trapper packets to bypass database logic checks, resulting in unauthorized database writes. This can be exploited by setting up a Man-in-the-Middle server to alte...
openSUSE Security Update : tiff (openSUSE-2016-184)
This update for tiff fixes the following issues : - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images boo964225 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...
SUSE SLED11 / SLES11 Security Update : tiff (SUSE-SU-2016:0353-1)
This update for tiff fixes the following issues : - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images bsc964225 - CVE-2015-7554: Out-of-bounds Write in the thumbnail and tiffcmp tools bsc960341 Note that Tenable Network Security has extracted the preceding...
RHEL 7 : kernel (RHSA-2016:0103)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0103 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. It was found that the x86 ISA Instruction Set...
CVE-2015-8782
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...
CVE-2015-8782
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...
CVE-2015-8782
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...
CVE-2015-8782
CVE-2015-8782 is a LibTIFF vulnerability in tif_luv.c that allows an attacker to trigger out-of-bounds writes via a crafted TIFF image, potentially enabling arbitrary code execution with the privileges of the image-processing component. Public advisories note this is one of multiple LibTIFF flaws...
CVE-2015-8782
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds writes via a crafted TIFF image, a different vulnerability than CVE-2015-8781...
Debian DLA-405-1 : tiff security update
Several security flaws have been found and solved in libtiff, a library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads and writes in the LogL16Decode, LogLuvDecode24, LogLuvDecode32, LogLuvDecodeTile, LogL16Encode, LogLuvEncode24,...