7563 matches found
CVE-2017-13750
There is a reachable assertion abort in the function jpcdecprocesssiz in jpc/jpcdec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack...
CVE-2017-13752
CVE-2017-13752 refers to JasPer 2.0.12, where a reachable assertion abort in jpc_dequantize() within jpc/jpc_dec.c can cause a remote denial of service. The connected documents (Nessus plugins and Fedora advisories) consistently list this CVE among JasPer-related issues and group it with other me...
CVE-2017-13745
CVE-2017-13745 affects JasPer. Affected component: JasPer JPEG 2000 decoder (jpc_dec_process_sot in libjasper/jpc/jpc_dec.c); vulnerable version explicitly cited as 2.0.12. Root cause: reachable assertion abort leading to remote denial-of-service when processing a crafted file, described as trigg...
CVE-2017-13749
Technical details for CVE-2017-13749 (affected product/version, impact, and remediation) are not provided in the connected documents. The available description notes a reachable assertion abort in JasPer 2.0.12 causing remote DoS; monitor for updates.
CVE-2017-13745
There is a reachable assertion abort in the function jpcdecprocesssot in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpcppmstabtostreams return value, a different vulnerability than CVE-2018-9154...
CVE-2017-13726
There is a reachable assertion abort in the function TIFFWriteDirectorySec in LibTIFF 4.0.8, related to tifdirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack...
CVE-2017-13727
There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd in LibTIFF 4.0.8, related to tifdirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack...
CVE-2017-13752
There is a reachable assertion abort in the function jpcdequantize in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack...
CVE-2017-13751
There is a reachable assertion abort in the function calcstepsizes in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack...
CVE-2017-13746
There is a reachable assertion abort in the function jpcdecprocesssiz in jpc/jpcdec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack...
openSUSE Security Update : ImageMagick (openSUSE-2017-971)
This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c bsc1042826 - CVE-2017-9440: A memory leak was found in the function ReadPSDChannelin coders/psd.c bsc1042812 - CVE-2017-9501: An...
openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2017:2271-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be conducted because there is a missing NULL check in the ReadMATImage function which leads to an assertion failure and application exit from within the DestroyImageInfo function...
CVE-2017-13658
In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...
CVE-2017-13658
Summary (CVE-2017-13658) ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3 is vulnerable due to a missing NULL check in ReadMATImage (coders/mat.c). This can trigger a denial of service (assertion failure and application exit) in DestroyImageInfo (MagickCore/image.c). Root cause is a NULL-checked...
Design/Logic Flaw
In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service assertion failure in WriteBlobStream in MagickCore/blob.c via a crafted file...
FreeBSD : pspp -- multiple vulnerabilities (6876b163-8708-11e7-8568-e8e0b747a45a)
CVE Details reports : - There is an Integer overflow in the hashint function of the libpspp library in GNU PSPP 0.10.5-pre2 CVE-2017-10791. - There is a NULL pointer Dereference in the function llinsert of the libpspp library in GNU PSPP 0.10.5-pre2 CVE-2017-10792. - There is an illegal address...
CVE-2017-12959
There is a reachable assertion abort in the function dictaddmrset in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack...
