793 matches found
CVE-2017-9174
CVE-2017-9174 affects AutoTrace 0.31.1, specifically the libautotrace.a component. The underlying issue is in the GET_COLOR function in color.c:21:23, which can be triggered remotely to cause a denial of service via an invalid read and a SEGV. The connected documents confirm the affected file and...
CVE-2017-9159
CVE-2017-9159 affects AutoTrace 0.31.1 via the libautotrace.a library, with the vulnerability in the pnm_load_rawpbm function (input-pnm.c:391:15). This allows remote attackers to cause a denial of service through an invalid write that can trigger a SEGV. Connected sources confirm the vulnerable ...
CVE-2017-9197
CVE-2017-9197 pertains to AutoTrace 0.31.1, where the library libautotrace.a contains a bug in input-tga.c:498:55 that cannot be represented in type int. This detail is consistently reported across multiple sources (NVD entry, Red Hat/CVE page, SUSE page, and CNVD) as a denial/denial-of-service s...
CVE-2017-9184
CVE-2017-9184 affects AutoTrace 0.31.1: libautotrace.a contains an issue in input-bmp.c:314:7 where an integer/size handling vulnerability can trigger a heap/buffer overflow. Several sources (CNVD, SUSE, Red Hat ecosystem notes) describe this as a vulnerability in AutoTrace 0.31.1 with potential ...
CVE-2017-9188
libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63...
CVE-2017-9182
The CVE-2017-9182 entry concerns AutoTrace 0.31.1’s libautotrace.a, where a defect in GET_COLOR (color.c:16:11) can trigger a use-after-free and invalid heap read, allowing a remote denial of service. The vulnerability affects AutoTrace 0.31.1 and is described with a network-facing impact (NVD CV...
CVE-2017-9157
CVE-2017-9157 affects AutoTrace 0.31.1 via library libautotrace.a. The vulnerability is in input-pnm.c at 306:14 (pnm_load_ascii) and can allow a remote attacker to cause a denial of service (invalid write and SEGV). Documents confirm the component and impact but do not provide patch/version info...
CVE-2017-9156
CVE-2017-9156 affects AutoTrace 0.31.1. The vulnerability is in the library component libautotrace.a and relates to the routine in input-pnm.c:303:12 (pnm_load_ascii). An attacker can remotely trigger a denial of service resulting in an invalid write and a crash (SEGV). The available documents co...
CVE-2017-9169
CVE-2017-9169 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based overflow in ReadImage (input-bmp.c:355:25). Multiple sources describe a heap overflow that could allow execution of arbitrary code or cause a denial of service. The available documents identify the affected software and ...
CVE-2017-9154
CVE-2017-9154 affects AutoTrace 0.31.1: libautotrace.a has a flaw in the GET_COLOR function (color.c:16:11) that enables remote attackers to cause a denial of service via invalid reads and a SEGV. Several sources corroborate the issue in AutoTrace 0.31.1 and describe it as a denial of service. Th...
CVE-2017-9164
CVE-2017-9164 details (Normal mode) Affected software: AutoTrace 0.31.1, specifically libautotrace.a. Vulnerability: heap-based buffer over-read in the GET_COLOR function located in color.c:16:11 of AutoTrace 0.31.1. Impact (as per document): confidentiality, integrity, and availability are poten...
CVE-2017-9170
CVE-2017-9170 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in ReadImage (input-bmp.c:370:25). This vulnerability is documented across multiple sources (NVD, Red Hat advisories, CNVD) with the same description; some sources describe potential arbitrary code execut...
CVE-2017-9190
CVE-2017-9190 affects AutoTrace 0.31.1 where libautotrace.a is vulnerable due to a flaw in free_bitmap (bitmap.c:24:5) that can cause a denial of service via an invalid free. Multiple advisories reference a bitmap double-free/invalid-free issue and note this vulnerability alongside related CVEs (...
CVE-2017-9167
CVE-2017-9167 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer overflow is caused by ReadImage in input-bmp.c:337:25, which can lead to arbitrary code execution or denial of service as described in CNVD/NVD entries. No patch/version remediation details are provided in the supplied d...
CVE-2017-9195
CVE-2017-9195 affects AutoTrace, with libautotrace.a in AutoTrace 0.31.1 exhibiting a heap-based buffer over-read in ReadImage (input-tga.c:620:27). This CVE is corroborated across multiple sources (NVD, Red Hat advisories, SUSE). Exploitation details, affected products beyond AutoTrace 0.31.1, a...
CVE-2017-9185
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7...
CVE-2017-9182
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service use-after-free and invalid heap read, related to the GETCOLOR function in color.c:16:11...
CVE-2017-9179
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:425:14...