789 matches found
UBUNTU-CVE-2017-9166
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:18:11...
UBUNTU-CVE-2017-9197
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55...
UBUNTU-CVE-2017-9169
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:355:25...
CVE-2017-9159
CVE-2017-9159 affects AutoTrace 0.31.1 via the libautotrace.a library, with the vulnerability in the pnm_load_rawpbm function (input-pnm.c:391:15). This allows remote attackers to cause a denial of service through an invalid write that can trigger a SEGV. Connected sources confirm the vulnerable ...
CVE-2017-9160
CVE-2017-9160 affects AutoTrace 0.31.1 (libautotrace.a) with a stack-based buffer overflow in pnmscanner_gettoken (input-pnm.c:458:12). Multiple connected sources corroborate the issue and point to potential arbitrary code execution and denial of service. The available documents consistently iden...
CVE-2017-9183
CVE-2017-9183 affects AutoTrace 0.31.1: libautotrace.a contains a vulnerability in input-bmp.c:309:7 described as “cannot be represented in type int.” Public entries (CNVD/Red Hat/SUSE/Nessus) consistently cite a buffer/overflow risk that could allow arbitrary code execution or denial of service,...
CVE-2017-9182
The CVE-2017-9182 entry concerns AutoTrace 0.31.1’s libautotrace.a, where a defect in GET_COLOR (color.c:16:11) can trigger a use-after-free and invalid heap read, allowing a remote denial of service. The vulnerability affects AutoTrace 0.31.1 and is described with a network-facing impact (NVD CV...
CVE-2017-9184
CVE-2017-9184 affects AutoTrace 0.31.1: libautotrace.a contains an issue in input-bmp.c:314:7 where an integer/size handling vulnerability can trigger a heap/buffer overflow. Several sources (CNVD, SUSE, Red Hat ecosystem notes) describe this as a vulnerability in AutoTrace 0.31.1 with potential ...
CVE-2017-9196
CVE-2017-9196 affects AutoTrace 0.31.1 via the libautotrace.a library. The ReadImage function in input-tga.c at line 528:7 contains a negative-size-param vulnerability that is described as a heap/buffer issue. Public sources (CNVD and related analyses) indicate this flaw could allow an attacker t...
CVE-2017-9163
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54...
CVE-2017-9164
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:16:11...
CVE-2017-9167
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25...
CVE-2017-9174
CVE-2017-9174 affects AutoTrace 0.31.1, specifically the libautotrace.a component. The underlying issue is in the GET_COLOR function in color.c:21:23, which can be triggered remotely to cause a denial of service via an invalid read and a SEGV. The connected documents confirm the affected file and...
CVE-2017-9186
CVE-2017-9186 affects AutoTrace 0.31.1 (libautotrace.a); the issue is in input-bmp.c:326:17 where a value cannot be represented in type int, described by CNVD as a denial-of-service vulnerability. Other connected sources reiterate the same vulnerable component/version; no patch/details are provid...
CVE-2017-9188
libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63...
CVE-2017-9172
CVE-2017-9172 affects AutoTrace 0.31.1: the heap-based buffer overflow in the ReadImage function of input-bmp.c (offset 496:29) on libautotrace.a. This vulnerability could allow arbitrary code execution or a denial of service, per multiple sources (CNVD/Red Hat/NVD). The issue is triggered by cra...
CVE-2017-9192
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7...
CVE-2017-9189
CVE-2017-9189 affects AutoTrace 0.31.1 via the libautotrace.a library. The vulnerability is triggered by the GET_COLOR function in color.c:16:11, causing an invalid read and remote denial of service that crashes the application. Exploitation details, affected platforms, and mitigation/fix informa...