PT-2017-1825

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier Adobe Acrobat versions affected versions not specified Description The issue is related to a memory address leak vulnerability in the image...

Scientific Linux Security Update : ocaml on SL6.x i386/x86_64 (20170321)

Security Fixes : - An integer conversion flaw was found in the way OCaml's String handled its length. Certain operations on an excessively long String could trigger a buffer overflow or result in an information leak. CVE-2015-8869 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

CVE-2016-3740

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdfx86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0...

Heap overflow

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdfx86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0...

CVE-2016-3740

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdfx86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0...

CVE-2016-3740

Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdfx86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary code via a large SamplesPerPixel value in a crafted TIFF image that is mishandled during PDF conversion. This is fixed in 8.0...

CentOS 6 : ocaml (CESA-2017:0565)

An update for ocaml is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ocaml security update

CentOS Errata and Security Advisory CESA-2017:0565 An update for ocaml is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

libguestfs, ocaml, perl, python, ruby security update

CentOS Errata and Security Advisory CESA-2017:0564 An update for libguestfs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

RHEL 6 : libguestfs (RHSA-2017:0564)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0564 advisory. The libguestfs packages contain a library, which is used for accessing and modifying virtual machine VM disk images. Security Fixes: An integer...

RHEL 6 : ocaml (RHSA-2017:0565)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0565 advisory. OCaml is a high-level, strongly-typed, functional, and object-oriented programming language from the ML family of languages. The ocaml packages conta...

Moderate: Red Hat Security Advisory: ocaml security update

An update for ocaml is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

ocaml: sizes arguments are sign-extended from 32 to 64 bits

An integer conversion flaw was found in the way OCaml's String handled its length. Certain operations on an excessively long String could trigger a buffer overflow or result in an information leak...

[SECURITY] Fedora 24 Update: w3m-0.5.3-30.git20170102.fc24

The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...

apng2gif integer overflow vulnerability (CNVD-2017-03542)

apng2gif is a set of tools used to convert APNG animation to GIF animation. An integer overflow vulnerability exists in apng2gif version 1.7. An attacker can exploit this vulnerability to cause a heap buffer overflow...

[SECURITY] Fedora 24 Update: icoutils-0.31.2-1.fc24

The icoutils are a set of programs for extracting and converting images in Microsoft Windows icon and cursor files. These files usually have the extension .ico or .cur, but they can also be embedded in executables or libraries...

CommVault Edge 11 SP6 - Stack Buffer Overflow (PoC)

CommVault Edge 11 SP6 - Stack Buffer Overflow PoC import socket import binascii import time import struct s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.settimeout1 s.connect"10.101.0.85", 8400 def srp=None, r=None: if p: print "sending %d bytes: %s " % lenp/2,p payl = binascii.a2bhexp...

Netpbm Local Denial of Service Vulnerability (CNVD-2017-03589)

netpbm is a tool for graphics conversion. Netpbm suffers from a local denial of service vulnerability. An attacker can exploit this vulnerability to cause the affected application to crash, resulting in a denial of service...

[SECURITY] Fedora 25 Update: jasper-1.900.13-3.fc25

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to escalate their privileges or cause service interruptions.

The vulnerability of the CoreMedia External Displays component in operating systems Mac OS X and iOS is related to incorrect type conversion. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure due to mismatched types using undefined vectors...