12326 matches found
CVE-2018-13009
The CVE-2018-13009 entry concerns gpmf-parser 1.1.2, with a heap-based buffer over-read in GPMF_Next of GPMF_parser.c caused by certain checks for GPMF_KEY_END and nest_level (conditional on buffer_size_longs). Impact is high per CVSS (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No remediation details ...
CVE-2018-13006
Removed by vendor...
CVE-2018-13006
CVE-2018-13006 is a GPAC/MP4Box vulnerability. The Debian DLA-1432-1 advisory reports two heap-based buffer over-reads in gpac: (1) CVE-2018-13005 in isomedia/box_code_base.c urn_Read (heap over-read due to a faulty while-loop condition) and (2) CVE-2018-13006 in isomedia/box_dump.c hdlr_dump (he...
CVE-2018-13007
An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...
CVE-2018-13005
An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...
CVE-2018-13008
CVE-2018-13008 affects the gpmf-parser 1.1.2 library. The vulnerability is a heap-based buffer over-read in the function the documents name as GPMF_Next inside GPMF_parser.c, triggered by certain checks for a positive nest_level. The connected records corroborate this as the same issue across mul...
CVE-2018-13005
Removed by vendor...
SUSE-SU-2018:1851-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: These security issues were fixed: - CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint function bsc1056277. - CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken function that allowed remote attackers to...
Stack overflow
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...
CVE-2018-12983
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...
CVE-2018-12983
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...
CVE-2018-12983
CVE-2018-12983 affects PoDoFo: a stack-based buffer over-read in PdfEncryptMD5Base::ComputeEncryptionKey() (PdfEncrypt.cpp) in PoDoFo 0.9.6-rc1 can be exploited remotely via a crafted PDF to cause a denial of service. Multiple advisories confirm a PoDoFo memory-handling issue leading to DoS when ...
CVE-2018-12983
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...
CVE-2018-12983
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...
CVE-2018-12983
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...
PT-2018-11515 · Podofo +4 · Podofo +4
Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6-rc1 Description: A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file. Recommendations: For PoDo...
CVE-2018-13006
An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...
[SECURITY] [DLA 1402-1] exiv2 security update
Package : exiv2 Version : 0.24-4.1+deb8u1 CVE ID : CVE-2018-10958 CVE-2018-10998 CVE-2018-10999 CVE-2018-11531 CVE-2018-12264 CVE-2018-12265 Debian Bug : 901706 901707 Several vulnerabilities have been discovered in exiv2, a C++ library and a command line utility to manage image metadata, resulti...