793 matches found
CVE-2017-9182
The CVE-2017-9182 entry concerns AutoTrace 0.31.1’s libautotrace.a, where a defect in GET_COLOR (color.c:16:11) can trigger a use-after-free and invalid heap read, allowing a remote denial of service. The vulnerability affects AutoTrace 0.31.1 and is described with a network-facing impact (NVD CV...
CVE-2017-9184
CVE-2017-9184 affects AutoTrace 0.31.1: libautotrace.a contains an issue in input-bmp.c:314:7 where an integer/size handling vulnerability can trigger a heap/buffer overflow. Several sources (CNVD, SUSE, Red Hat ecosystem notes) describe this as a vulnerability in AutoTrace 0.31.1 with potential ...
CVE-2017-9159
CVE-2017-9159 affects AutoTrace 0.31.1 via the libautotrace.a library, with the vulnerability in the pnm_load_rawpbm function (input-pnm.c:391:15). This allows remote attackers to cause a denial of service through an invalid write that can trigger a SEGV. Connected sources confirm the vulnerable ...
CVE-2017-9188
libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63...
CVE-2017-9189
CVE-2017-9189 affects AutoTrace 0.31.1 via the libautotrace.a library. The vulnerability is triggered by the GET_COLOR function in color.c:16:11, causing an invalid read and remote denial of service that crashes the application. Exploitation details, affected platforms, and mitigation/fix informa...
CVE-2017-9174
CVE-2017-9174 affects AutoTrace 0.31.1, specifically the libautotrace.a component. The underlying issue is in the GET_COLOR function in color.c:21:23, which can be triggered remotely to cause a denial of service via an invalid read and a SEGV. The connected documents confirm the affected file and...
CVE-2017-9157
CVE-2017-9157 affects AutoTrace 0.31.1 via library libautotrace.a. The vulnerability is in input-pnm.c at 306:14 (pnm_load_ascii) and can allow a remote attacker to cause a denial of service (invalid write and SEGV). Documents confirm the component and impact but do not provide patch/version info...
CVE-2017-9156
CVE-2017-9156 affects AutoTrace 0.31.1. The vulnerability is in the library component libautotrace.a and relates to the routine in input-pnm.c:303:12 (pnm_load_ascii). An attacker can remotely trigger a denial of service resulting in an invalid write and a crash (SEGV). The available documents co...
CVE-2017-9187
CVE-2017-9187 affects AutoTrace 0.31.1: libautotrace.a has a bug in input-bmp.c:486:7 described as a “cannot be represented in type int” issue. The vulnerability relates to bitmap processing in the autotrace codebase (input-bmp.c) and is documented across multiple sources (NVD, Red Hat advisories...
CVE-2017-9154
CVE-2017-9154 affects AutoTrace 0.31.1: libautotrace.a has a flaw in the GET_COLOR function (color.c:16:11) that enables remote attackers to cause a denial of service via invalid reads and a SEGV. Several sources corroborate the issue in AutoTrace 0.31.1 and describe it as a denial of service. Th...
CVE-2017-9167
CVE-2017-9167 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer overflow is caused by ReadImage in input-bmp.c:337:25, which can lead to arbitrary code execution or denial of service as described in CNVD/NVD entries. No patch/version remediation details are provided in the supplied d...
CVE-2017-9195
CVE-2017-9195 affects AutoTrace, with libautotrace.a in AutoTrace 0.31.1 exhibiting a heap-based buffer over-read in ReadImage (input-tga.c:620:27). This CVE is corroborated across multiple sources (NVD, Red Hat advisories, SUSE). Exploitation details, affected products beyond AutoTrace 0.31.1, a...
CVE-2017-9190
CVE-2017-9190 affects AutoTrace 0.31.1 where libautotrace.a is vulnerable due to a flaw in free_bitmap (bitmap.c:24:5) that can cause a denial of service via an invalid free. Multiple advisories reference a bitmap double-free/invalid-free issue and note this vulnerability alongside related CVEs (...
CVE-2017-9185
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7...
CVE-2017-9182
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service use-after-free and invalid heap read, related to the GETCOLOR function in color.c:16:11...
CVE-2017-9179
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:425:14...
CVE-2017-9178
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c:421:11...
CVE-2017-9186
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17...