CVE-2019-4655: Undefined Security Weakness

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

PT-2019-17147

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.3 Description The issue allows an authenticated user to reset client connections due to an error within the Data Conversion routine, resulting in a denial of service attack. Recommendations For IBM MQ versio...

PT-2019-6180 · Fig2Dev · Fig2Dev

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A global buffer overflow in the genmp writefontmacro latex component in genmp.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into mp format. The vulnerability is...

PT-2019-6181 · Fig2Dev +3 · Fig2Dev +3

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A stack-based buffer overflow in the genpstrx text component in genpstricks.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format. Recommendations: F...

CVE-2019-6147: Incorrect Type Conversion or Cast

Forcepoint NGFW Security Management Center SMC versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next...

Security Bulletin: IBM MQ and IBM MQ Appliance are vulnerable to a denial of service attack caused by an error within the Data Conversion routine (CVE-2019-4655)

Summary An error was found within the IBM MQ message data conversion processing code that could cause multiple failure data capture FDC records to be generated and prevent the channel handling process amqrmppa from handling requests. Vulnerability Details CVEID: CVE-2019-4655 DESCRIPTION: IBM MQ ...

EulerOS 2.0 SP3 : xorg-x11-server (EulerOS-SA-2019-2683)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xor...

Firefox Thunderbird Information Disclosure

The vulnerability in the JavaScript object handling functions of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to a lack of type conversion mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential information and cause service...

Object injection in cookie driver in phpfastcache

Impact An possible object injection has been discovered in cookie driver prior 5.0.13 versions of 5.x releases. Patches The issue has been addressed by enforcing JSON conversion when deserializing Workarounds If you can't fix it, use another driver such as "Files" Filesystem References Fixing...

GHSA-484F-743F-6JX2 Object injection in cookie driver in phpfastcache

Impact An possible object injection has been discovered in cookie driver prior 5.0.13 versions of 5.x releases. Patches The issue has been addressed by enforcing JSON conversion when deserializing Workarounds If you can't fix it, use another driver such as "Files" Filesystem References Fixing...

Microsoft Windows Media Player Color Conversion Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

EulerOS 2.0 SP2 : xorg-x11-server (EulerOS-SA-2019-2421)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause ...

Google Chrome WebRTC Data Compromise

The vulnerability of Google Chrome’s WebRTC technology is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created video file...

OPENSUSE-SU-2019:2613-1 Security update for libidn2

This update for libidn2 to version 2.2.0 fixes the following issues: - CVE-2019-12290: Fixed an improper round-trip check when converting A-labels to U-labels bsc1154884. - CVE-2019-18224: Fixed a heap-based buffer overflow that was caused by long domain strings bsc1154887. This update was import...

ReadableStreams Component Code Execution

The vulnerability of the ReadableStreams component in Google Chrome’s Blink web rendering engine is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

Accusoft ImageGear GEM Raster Code Execution Vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to th...

CVE-2015-3406: Incorrect Conversion between Numeric Types

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors...

[SECURITY] Fedora 29 Update: ghostscript-9.27-2.fc29

This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...

CVE-2019-10203: Incorrect Conversion between Numeric Types

PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS...

ALPINE-CVE-2019-19221

In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive...