734 matches found
CVE-2017-9172
CVE-2017-9172 affects AutoTrace 0.31.1: the heap-based buffer overflow in the ReadImage function of input-bmp.c (offset 496:29) on libautotrace.a. This vulnerability could allow arbitrary code execution or a denial of service, per multiple sources (CNVD/Red Hat/NVD). The issue is triggered by cra...
CVE-2017-9173
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29...
CVE-2017-9170
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25...
CVE-2017-9178
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c:421:11...
CVE-2017-9153
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadrawpbm function in input-pnm.c:391:13...
CVE-2017-9188
CVE-2017-9188 affects AutoTrace 0.31.1 (libautotrace.a). The vulnerability is a left-shift/biWidth-related integer overflow in input-bmp.c:516:63 that can trigger out-of-bounds behavior in a BMP handling path; CVSS reports high to critical impact (network, no authentication, high impact to confid...
CVE-2017-9180
CVE-2017-9180 affects AutoTrace 0.31.1: libautotrace.a vulnerable via ReadImage in input-bmp.c:440:14, enabling remote denial of service through an invalid read/SEGV. Details consistently point to the bitmap-reading path (input-bmp.c) as the root cause. No public patch/version remediation details...
CVE-2017-9164
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:16:11...
CVE-2017-9177
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:390:12...
CVE-2017-9195
CVE-2017-9195 affects AutoTrace, with libautotrace.a in AutoTrace 0.31.1 exhibiting a heap-based buffer over-read in ReadImage (input-tga.c:620:27). This CVE is corroborated across multiple sources (NVD, Red Hat advisories, SUSE). Exploitation details, affected products beyond AutoTrace 0.31.1, a...
CVE-2017-9155
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the inputpnmreader function in input-pnm.c:243:3...
CVE-2017-9193
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33...
CVE-2017-9198
CVE-2017-9198 affects AutoTrace 0.31.1: libautotrace.a contains a bug in input-tga.c at line 508:18 described as a “cannot be represented in type int” issue. The connected documents consistently reference this exact file/line and the underlying integer representation problem. There is no explicit...
CVE-2017-9192
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7...
CVE-2017-9156
CVE-2017-9156 affects AutoTrace 0.31.1. The vulnerability is in the library component libautotrace.a and relates to the routine in input-pnm.c:303:12 (pnm_load_ascii). An attacker can remotely trigger a denial of service resulting in an invalid write and a crash (SEGV). The available documents co...
CVE-2017-9200
CVE-2017-9200 affects AutoTrace 0.31.1’s libautotrace.a, with a defect in input-tga.c at line 528 (cannot be represented in type int) that can lead to denial of service. Multiple connected sources corroborate a DoS consequence for this version (e.g., CNVD-2017-08537, RH advisories). No further ex...
CVE-2017-9190
libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid free, related to the freebitmap function in bitmap.c:24:5...
CVE-2017-9164
CVE-2017-9164 details (Normal mode) Affected software: AutoTrace 0.31.1, specifically libautotrace.a. Vulnerability: heap-based buffer over-read in the GET_COLOR function located in color.c:16:11 of AutoTrace 0.31.1. Impact (as per document): confidentiality, integrity, and availability are poten...