734 matches found
CVE-2017-9152
CVE-2017-9152 affects AutoTrace 0.31.1 where libautotrace.a contains a heap-based buffer over-read in pnm_load_raw (input-pnm.c:346:41). This is documented across multiple feeds (NVD entry) with a high/critical impact (network attack via crafted input) and no explicit fix/version update details p...
CVE-2017-9169
CVE-2017-9169 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based overflow in ReadImage (input-bmp.c:355:25). Multiple sources describe a heap overflow that could allow execution of arbitrary code or cause a denial of service. The available documents identify the affected software and ...
CVE-2017-9179
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:425:14...
CVE-2017-9163
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54...
CVE-2017-9167
CVE-2017-9167 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer overflow is caused by ReadImage in input-bmp.c:337:25, which can lead to arbitrary code execution or denial of service as described in CNVD/NVD entries. No patch/version remediation details are provided in the supplied d...
CVE-2017-9181
Technical details about CVE-2017-9181 are not publicly provided in the supplied connected documents. Monitor for updates from vendors and security bulletins.
CVE-2017-9153
CVE-2017-9153 affects AutoTrace 0.31.1 (libautotrace.a) with a heap-based buffer overflow in pnm_load_rawpbm (input-pnm.c:391:13). This can be triggered by a crafted bitmap image, potentially enabling remote code execution or DoS. Remediation in public advisories recommends upgrading to a newer A...
CVE-2017-9196
libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7...
CVE-2017-9179
CVE-2017-9179 affects AutoTrace 0.31.1 (libautotrace.a). The vulnerability stems from a bug in the ReadImage path for BMP handling (input-bmp.c:425:14) that can be triggered by processing a crafted bitmap, enabling a remote attacker to cause a denial of service via an invalid read leading to a SE...
CVE-2017-9161
CVE-2017-9161 affects AutoTrace 0.31.1: libautotrace.a contains a defect in autotrace.c at line 188:23 described as a cannot be represented in type int. The connected sources also associate this family of issues with potential denial of service (CNVD/CVE discourse) and related integer overflow co...
CVE-2017-9181
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c...
CVE-2017-9167
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25...
CVE-2017-9171
CVE-2017-9171 describes a heap-based buffer over-read in libautotrace.a (AutoTrace 0.31.1) within ReadImage in input-bmp.c at line 492:24. The vulnerability affects AutoTrace’s libautotrace.a and is confirmed by multiple sources (e.g., NVD entry and national/international advisories). The CVSS me...
CVE-2017-9194
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29...
CVE-2017-9175
CVE-2017-9175 affects AutoTrace 0.31.1: the vulnerable component is the library libautotrace.a, specifically the ReadImage function in input-bmp.c at line 353:25. This vulnerability allows remote attackers to cause a denial of service via an invalid write that leads to a SEGV. The information acr...
CVE-2017-9165
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11...
CVE-2017-9165
CVE-2017-9165 affects AutoTrace 0.31.1: the heap-based buffer over-read occurs in libautotrace.a, specifically the GET_COLOR function in color.c:17:11. Multiple sources (NVD/Red Hat/SUSE, Nessus plugins, CNVD, PT Security) consistently describe a heap over-read/overflow scenario in the color load...
CVE-2017-9184
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7...
CVE-2017-9182
The CVE-2017-9182 entry concerns AutoTrace 0.31.1’s libautotrace.a, where a defect in GET_COLOR (color.c:16:11) can trigger a use-after-free and invalid heap read, allowing a remote denial of service. The vulnerability affects AutoTrace 0.31.1 and is described with a network-facing impact (NVD CV...