6694 matches found
apng2gif integer overflow vulnerability (CNVD-2017-03542)
apng2gif is a set of tools used to convert APNG animation to GIF animation. An integer overflow vulnerability exists in apng2gif version 1.7. An attacker can exploit this vulnerability to cause a heap buffer overflow...
[SECURITY] Fedora 24 Update: icoutils-0.31.2-1.fc24
The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries...
CommVault Edge 11 SP6 - Stack Buffer Overflow (PoC)
CommVault Edge 11 SP6 - Stack Buffer Overflow PoC import socket import binascii import time import struct s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.settimeout1 s.connect"10.101.0.85", 8400 def srp=None, r=None: if p: print "sending %d bytes: %s " % lenp/2,p payl = binascii.a2bhexp...
Netpbm Local Denial of Service Vulnerability (CNVD-2017-03589)
netpbm is a tool for graphics conversion. Netpbm suffers from a local denial of service vulnerability. An attacker can exploit this vulnerability to cause the affected application to crash, resulting in a denial of service...
[SECURITY] Fedora 25 Update: jasper-1.900.13-3.fc25
This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...
The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.
The vulnerability of the Bluetooth component in the Mac OS X operating system is related to incorrect type conversion. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure using a specially created application...
Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to escalate their privileges or cause service interruptions.
The vulnerability of the CoreMedia External Displays component in operating systems Mac OS X and iOS is related to incorrect type conversion. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure due to mismatched types using undefined vectors...
IBM WebSphere MQ 7.0.1.x / 7.1.0.x < 7.1.0.9 / 7.5.0.x < 7.5.0.8 / 8.0.0.x < 8.0.0.6 / 9.0.0.x < 9.0.0.1 Multiple Vulnerabilities
According to its self-reported version, the IBM WebSphere MQ server installed on the remote Windows host is version 7.0.1.x without patch APAR IT14385, 7.1.0.x prior to 7.1.0.9, 7.5.0.x prior to 7.5.0.8, 8.0.0.x prior to 8.0.0.6, or 9.0.0.x prior to 9.0.0.1. It is, therefore, affected by multiple...
Iceni Argus Memory Corruption Vulnerability
Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files have a security vulnerability, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the application crash...
An error during signature verification can be treated as a successful verification.
Security update for signature validation on LogoutRequest/LogoutResponse. In order to verify Signatures on Logoutrequests and LogoutResponses we use the verifySignature of the class XMLSecurityKey from the xmlseclibs library. That method end up calling opensslverify depending on the signature...
Iceni Argus heap buffer overflow vulnerability (CNVD-2017-02539)
Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files there are heap buffer overflow vulnerabilities, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the...
PT-2017-9655 · Iceni · Iceni Argus
Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: An integer-overflow issue exists when Iceni Argus attempts to convert a malformed PDF to XML. The application tries to convert each character from a font into a polygon and then rasteri...
CVE-2016-8389: Integer Overflow or Wraparound
An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to convert each character from a font into a polygon and then attempt to rasterize these shapes. As the application attempts to iterate through the rows and...
CVE-2016-8385
An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In mo...
CVE-2016-8386: Out-of-bounds Write
An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the...
Iceni Argus ipStringCreate Code Execution Vulnerability
Summary An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send file to trigger this vulnerability. Tested Versions Iceni Argus 6.6.0...
Iceni Argus TrueType Font File Cmap Table Code Execution Vulnerability
Summary An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than...
Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability
Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font’s name to a single object within an array of objects. Due to ...
