libcroco 'cr_input_new_from_uri' function denial of service vulnerability

libcroco is a CSS2 parsing library. A security vulnerability exists in the 'crinputnewfromuri' function in the cr-input.c file in libcroco versions 0.6.11 and 0.6.12. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read with the help of a...

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure or obtain confidential information.

The vulnerability of the Menus component in the Mac OS X operating system arises from reading data beyond the specified buffer limit. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or cause a service failure reading beyond the...

The vulnerability of the FreeType library, which allows a perpetrator to trigger a service failure or cause other effects

The vulnerability of the parsecharstrings function in the type1/t1load.c file of the FreeType library does not guarantee that the font contains the glyph’s name. This vulnerability arises from reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cau...

The vulnerability of the Mac OS X operating system and the iOS operating system allows attackers to trigger service interruptions or obtain confidential information.

The vulnerability of the FontParser component in the Mac OS X and iOS operating systems arises from reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to obtain confidential information or cause a service failure such as reading beyond the memory limit or...

UBUNTU-CVE-2017-7697

In libsamplerate before 0.1.9, a buffer over-read occurs in the calcoutputsingle function in srcsinc.c via a crafted audio file...

DEBIAN-CVE-2017-7697

In libsamplerate before 0.1.9, a buffer over-read occurs in the calcoutputsingle function in srcsinc.c via a crafted audio file...

PT-2017-17839 · Red Hat +3 · Elfutils +3

Name of the Vulnerable Software and Affected Versions: elfutils version 0.168 Description: The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted ELF file. This is due to the ebl object note type name functio...

UBUNTU-CVE-2016-10271

tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service heap-based buffer over-read and buffer overflow or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tiffax3.c:413:13...

DEBIAN-CVE-2016-10269

LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted TIFF image, related to "READ of...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the SpliceImage function in the console-based image editing tool ImageMagick is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure application termination by using a specially created PNG file...

DEBIAN-CVE-2017-7210

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads of size 1 and size 8 while handling corrupt STABS enum type strings in a crafted object file, leading to program crash...

Updated wavpack packages fix security vulnerability

Hanno Böck discovered a global buffer overread vulnerability in WavPack's word parsing logic CVE-2016-10169, this update fixes it...

MGASA-2017-0077 Updated wavpack packages fix security vulnerability

Hanno Böck discovered a global buffer overread vulnerability in WavPack's word parsing logic CVE-2016-10169, this update fixes it...

UBUNTU-CVE-2017-6960

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the imagesize variable...

PT-2017-17427 · Apng2Gif +1 · Apng2Gif +1

Name of the Vulnerable Software and Affected Versions: apng2gif version 1.7 Description: An issue was discovered related to an integer overflow, resulting in a heap-based buffer over-read. This issue is connected to the load apng function and the imagesize variable. Recommendations: For apng2gif...

UBUNTU-CVE-2017-6800

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

DEBIAN-CVE-2016-10244

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2016-10244

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...

DEBIAN-CVE-2017-6347

The ipcmsgrecvchecksum function in net/ipv4/ipsockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service buffer over-read or possibly have unspecified other impact via crafted system calls, as demonstrated b...

UBUNTU-CVE-2017-6347

The ipcmsgrecvchecksum function in net/ipv4/ipsockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service buffer over-read or possibly have unspecified other impact via crafted system calls, as demonstrated b...