Code injection

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12143

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadinfo in lqtquicktime.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12144

In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12143

CVE-2017-12143 affects libquicktime 1.2.4 . The root cause is an allocation failure in the function quicktime_read_info inside lqt_quicktime.c , which can be triggered by processing a crafted file and leads to a denial of service . The vulnerability is described with a network-vector exploitation...

CVE-2017-12145

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12144

In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12144

CVE-2017-12144 affects the ytnef package, specifically the 1.9.2 release. The vulnerability arises from an allocation failure in the function TNEFFillMapi in ytnef.c, which can lead to a denial of service when processing a crafted file. Public references in the connected records corroborate the i...

CVE-2017-12143

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadinfo in lqtquicktime.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12145

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12145

CVE-2017-12145 affects libquicktime 1.2.4. The vulnerability is an allocation failure in the function quicktime_read_ftyp (ftyp.c) that can be triggered by processing a crafted file, leading to a denial of service. The available documents do not provide exploit details, affected products beyond t...

CVE-2017-12145: Improper Input Validation

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-12143: Improper Input Validation

In libquicktime 1.2.4, an allocation failure was found in the function quicktimereadinfo in lqtquicktime.c, which allows attackers to cause a denial of service via a crafted file...

UBUNTU-CVE-2017-9937

In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack...

PT-2017-4260 · None +5 · Libtiff +5

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.0.8 Description: The issue is related to a memory malloc failure in the tif jbig.c component, which can be exploited by a crafted TIFF document, leading to a remote denial of service attack. It is also associated with a buff...

httpd: DoS vulnerability in mod_auth_digest

It was discovered that the modauthdigest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication...

BSA-2017-281

Security Advisory ID : BSA-2017-281 Component : OpenSSL Revision : 3.0: Final Thedoaproutchfunction in crypto/bio/bprint.cin OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service...

httpd: DoS vulnerability in mod_auth_digest

It was discovered that the modauthdigest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication...

Amazon Linux AMI : GraphicsMagick (ALAS-2017-820)

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file.CVE-2017-6335 The WPG format reader in GraphicsMagick 1.3.2...

Medium: GraphicsMagick

Issue Overview: The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file.CVE-2017-6335 The WPG format reader in...

CVE-2016-4912

The xrealloc function in xlspxmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a large number of crafted packets, which triggers a memory allocation failure...