CVE-2019-14288

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

CVE-2019-14288

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

CVE-2019-14288

CVE-2019-14288 affects Xpdf 4.01.01 with an integer overflow in JBIG2Bitmap::combine() inside JBIG2Stream.cc for the one-byte-per-line scenario. The connected documents corroborate the flaw in this component/version across various advisories (Debian, SUSE, osv, CNVD, CNVD mirrors, NVD/CVE listing...

CVE-2019-14288: Integer Overflow or Wraparound

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

PT-2019-13585

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description An issue was discovered in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case, which is affected by an integer overflow. Recommendations For Xpdf version 4.01.01, consider...

CVE-2019-14289: Integer Overflow or Wraparound

An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case...

PT-2019-13586

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description An issue was discovered in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case, which is affected by an integer overflow. Recommendations For Xpdf version 4.01.01, as a...

Malicious Package

Overview Version 2.0.2 of stream-combine has malicious code design to steal credentials and credit card information. The code searches all form elements for passwords, credit card numbers and CVC codes. It then uploads the information to a remote server using HTML links embedded in the page or fo...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Bitmap::combine

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5940249153765376 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

combine-inst.com XSS vulnerability

Vulnerable URL: http://www.combine-inst.com/Products.asp?belongid=1"...

OpenSSL ASN1_TFLG_COMBINE Information Disclosure

The vulnerability of the ASN1TFLGCOMBINE implementation crypto/asn1/tasndec.c in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain protected information from the process’s memory...

DEBIAN-CVE-2015-3195

The ASN1TFLGCOMBINE implementation in crypto/asn1/tasndec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by...

DEBIAN-CVE-2014-9495

Heap-based buffer overflow in the pngcombinerow function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image...

[APKinspector] Powerful GUI tool to analyze the Android applications

The goal of this project is to aide analysts and reverse engineers to visualize compiled Android packages and their corresponding DEX code. APKInspector provides both analysis functions and graphic features for the users to gain deep insight into the malicious apps: CFG Call Graph Static...

[SECURITY] Fedora 18 Update: php-symfony2-Config-2.2.10-1.fc18

The Config Component provides several classes to help you find, load, combi ne, autofill and validate configuration values of any kind, whatever their sour ce may be Yaml, XML, INI files, or for instance a database...

PT-2013-6243

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.1 Description The issue is related to the ff combine frame function in libavcodec/parser.c, which does not properly handle certain memory-allocation errors. This can be exploited by remote attackers using crafted dat...

zoo contains exploitable buffer overflows

Topic: zoo contains exploitable buffer overflows Announced: 2006-02-22 Product: zoo Category: Applications/Archiving Impact: Remote code execution Credits: Jean-Sbastien Guay-Leroux I. BACKGROUND zoo is a file archiving utility for maintaining collections of files. It uses Lempel-Ziv compression ...

Stack overflow

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...

CVE-2006-0855

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...