789 matches found
CVE-2017-9164
CVE-2017-9164 details (Normal mode) Affected software: AutoTrace 0.31.1, specifically libautotrace.a. Vulnerability: heap-based buffer over-read in the GET_COLOR function located in color.c:16:11 of AutoTrace 0.31.1. Impact (as per document): confidentiality, integrity, and availability are poten...
CVE-2017-9194
CVE-2017-9194 affects AutoTrace 0.31.1 (libautotrace.a). A heap-based buffer over-read exists in the ReadImage function (input-tga.c:559:29). CVSS data in the initial entry flags a network attack vector with no authentication and partial confidentiality/integrity/availability impact (base scores ...
CVE-2017-9179
CVE-2017-9179 affects AutoTrace 0.31.1 (libautotrace.a). The vulnerability stems from a bug in the ReadImage path for BMP handling (input-bmp.c:425:14) that can be triggered by processing a crafted bitmap, enabling a remote attacker to cause a denial of service via an invalid read leading to a SE...
CVE-2017-9180
CVE-2017-9180 affects AutoTrace 0.31.1: libautotrace.a vulnerable via ReadImage in input-bmp.c:440:14, enabling remote denial of service through an invalid read/SEGV. Details consistently point to the bitmap-reading path (input-bmp.c) as the root cause. No public patch/version remediation details...
CVE-2017-9195
CVE-2017-9195 affects AutoTrace, with libautotrace.a in AutoTrace 0.31.1 exhibiting a heap-based buffer over-read in ReadImage (input-tga.c:620:27). This CVE is corroborated across multiple sources (NVD, Red Hat advisories, SUSE). Exploitation details, affected products beyond AutoTrace 0.31.1, a...
CVE-2017-9170
CVE-2017-9170 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in ReadImage (input-bmp.c:370:25). This vulnerability is documented across multiple sources (NVD, Red Hat advisories, CNVD) with the same description; some sources describe potential arbitrary code execut...
CVE-2017-9168
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25...
CVE-2017-9176
CVE-2017-9176 affects AutoTrace 0.31.1, specifically the libautotrace.a library. The vulnerability arises in the ReadImage function of input-bmp.c (line 370:25), leading to an invalid write and a segmentation fault, which can cause a denial of service. The included references indicate both NVD an...
CVE-2017-9185
CVE-2017-9185 affects AutoTrace 0.31.1: libautotrace.a contains a bug in input-bmp.c:319:7 described as a “cannot be represented in type int” issue, leading to a buffer/size handling vulnerability. Descriptions and linked sources (NVD, Red Hat/CVE entries, SUSE page, Nessus plugins) converge on t...
CVE-2017-9175
CVE-2017-9175 affects AutoTrace 0.31.1: the vulnerable component is the library libautotrace.a, specifically the ReadImage function in input-bmp.c at line 353:25. This vulnerability allows remote attackers to cause a denial of service via an invalid write that leads to a SEGV. The information acr...
CVE-2017-9151
CVE-2017-9151 affects AutoTrace 0.31.1: the libautotrace.a library’s pnm_load_ascii function (input-pnm.c:303:12) contains a heap-based buffer overflow. Reports consistently reference the affected component as AutoTrace/libautotrace.a and specify a vulnerability in handling ASCII PNM input, with ...
CVE-2017-9153
CVE-2017-9153 affects AutoTrace 0.31.1 (libautotrace.a) with a heap-based buffer overflow in pnm_load_rawpbm (input-pnm.c:391:13). This can be triggered by a crafted bitmap image, potentially enabling remote code execution or DoS. Remediation in public advisories recommends upgrading to a newer A...
CVE-2017-9168
CVE-2017-9168 affects AutoTrace 0.31.1 (libautotrace.a) with a heap-based buffer overflow in the ReadImage function of input-bmp.c at line 353:25. The vulnerability arises from improper handling in the BMP image parsing, enabling a heap overflow. Documents consistently identify the affected binar...
CVE-2017-9178
CVE-2017-9178 affects AutoTrace 0.31.1: libautotrace.a is vulnerable due to a flaw in ReadImage (input-bmp.c:421:11) that allows remote attackers to trigger a denial of service (invalid write and SEGV). The connected documents confirm the exact vulnerable component and file, but do not provide a ...
CVE-2017-9158
CVE-2017-9158 affects AutoTrace 0.31.1: libautotrace.a vulnerable in input-pnm.c at pnm_load_raw:336:11, allowing remote attackers to cause a denial of service via an invalid write and subsequent SEGV. The vulnerability is evidenced across multiple sources (e.g., Red Hat advisory, SUSE entry, NVD...
CVE-2017-9192
The CVE-2017-9192 entry affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in the ReadImage function (input-tga.c:528:7). The detail is consistently reported across sources (NVD/Red Hat/SUSE/Nessus-style entries) as a heap overflow in ReadImage within libautotrace.a. T...
CVE-2017-9152
CVE-2017-9152 affects AutoTrace 0.31.1 where libautotrace.a contains a heap-based buffer over-read in pnm_load_raw (input-pnm.c:346:41). This is documented across multiple feeds (NVD entry) with a high/critical impact (network attack via crafted input) and no explicit fix/version update details p...
CVE-2017-9151
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadascii function in input-pnm.c:303:12...