734 matches found
CVE-2017-9178
CVE-2017-9178 affects AutoTrace 0.31.1: libautotrace.a is vulnerable due to a flaw in ReadImage (input-bmp.c:421:11) that allows remote attackers to trigger a denial of service (invalid write and SEGV). The connected documents confirm the exact vulnerable component and file, but do not provide a ...
CVE-2017-9174
CVE-2017-9174 affects AutoTrace 0.31.1, specifically the libautotrace.a component. The underlying issue is in the GET_COLOR function in color.c:21:23, which can be triggered remotely to cause a denial of service via an invalid read and a SEGV. The connected documents confirm the affected file and...
CVE-2017-9193
CVE-2017-9193 affects AutoTrace 0.31.1’s libautotrace.a; a heap-based buffer over-read occurs in ReadImage (input-tga.c:538:33). CVSS v2/3 scores indicate HIGH/CRITICAL impact (network, no auth, no user interaction). Affected product is AutoTrace; no patch/version fix details are provided in the ...
CVE-2017-9175
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c:353:25...
CVE-2017-9200
libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63...
CVE-2017-9160
CVE-2017-9160 affects AutoTrace 0.31.1 (libautotrace.a) with a stack-based buffer overflow in pnmscanner_gettoken (input-pnm.c:458:12). Multiple connected sources corroborate the issue and point to potential arbitrary code execution and denial of service. The available documents consistently iden...
CVE-2017-9182
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service use-after-free and invalid heap read, related to the GETCOLOR function in color.c:16:11...
CVE-2017-9168
CVE-2017-9168 affects AutoTrace 0.31.1 (libautotrace.a) with a heap-based buffer overflow in the ReadImage function of input-bmp.c at line 353:25. The vulnerability arises from improper handling in the BMP image parsing, enabling a heap overflow. Documents consistently identify the affected binar...
CVE-2017-9157
CVE-2017-9157 affects AutoTrace 0.31.1 via library libautotrace.a. The vulnerability is in input-pnm.c at 306:14 (pnm_load_ascii) and can allow a remote attacker to cause a denial of service (invalid write and SEGV). Documents confirm the component and impact but do not provide patch/version info...
CVE-2017-9184
CVE-2017-9184 affects AutoTrace 0.31.1: libautotrace.a contains an issue in input-bmp.c:314:7 where an integer/size handling vulnerability can trigger a heap/buffer overflow. Several sources (CNVD, SUSE, Red Hat ecosystem notes) describe this as a vulnerability in AutoTrace 0.31.1 with potential ...
CVE-2017-9194
CVE-2017-9194 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer over-read exists in the ReadImage function (input-tga.c:559:29). CVSS data in the initial entry flags a network attack vector with no authentication and partial confidentiality/integrity/availability impact (base scores ...
CVE-2017-9151
CVE-2017-9151 affects AutoTrace 0.31.1: the libautotrace.a library’s pnm_load_ascii function (input-pnm.c:303:12) contains a heap-based buffer overflow. Reports consistently reference the affected component as AutoTrace/libautotrace.a and specify a vulnerability in handling ASCII PNM input, with ...
CVE-2017-9152
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnmloadraw function in input-pnm.c:346:41...
CVE-2017-9158
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the pnmloadraw function in input-pnm.c:336:11...
CVE-2017-9168
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25...
CVE-2017-9176
CVE-2017-9176 affects AutoTrace 0.31.1, specifically the libautotrace.a library. The vulnerability arises in the ReadImage function of input-bmp.c (line 370:25), leading to an invalid write and a segmentation fault, which can cause a denial of service. The included references indicate both NVD an...
CVE-2017-9183
CVE-2017-9183 affects AutoTrace 0.31.1: libautotrace.a contains a vulnerability in input-bmp.c:309:7 described as “cannot be represented in type int.” Public entries (CNVD/Red Hat/SUSE/Nessus) consistently cite a buffer/overflow risk that could allow arbitrary code execution or denial of service,...
CVE-2017-9170
CVE-2017-9170 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in ReadImage (input-bmp.c:370:25). This vulnerability is documented across multiple sources (NVD, Red Hat advisories, CNVD) with the same description; some sources describe potential arbitrary code execut...
CVE-2017-9172
CVE-2017-9172 affects AutoTrace 0.31.1: the heap-based buffer overflow in the ReadImage function of input-bmp.c (offset 496:29) on libautotrace.a. This vulnerability could allow arbitrary code execution or a denial of service, per multiple sources (CNVD/Red Hat/NVD). The issue is triggered by cra...