5262 matches found
[SECURITY] Fedora 25 Update: jasper-1.900.13-3.fc25
This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...
Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to escalate their privileges or cause service interruptions.
The vulnerability of the CoreMedia External Displays component in operating systems Mac OS X and iOS is related to incorrect type conversion. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure due to mismatched types using undefined vectors...
The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.
The vulnerability of the Bluetooth component in the Mac OS X operating system is related to incorrect type conversion. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure using a specially created application...
IBM WebSphere MQ 7.0.1.x / 7.1.0.x < 7.1.0.9 / 7.5.0.x < 7.5.0.8 / 8.0.0.x < 8.0.0.6 / 9.0.0.x < 9.0.0.1 Multiple Vulnerabilities
According to its self-reported version, the IBM WebSphere MQ server installed on the remote Windows host is version 7.0.1.x without patch APAR IT14385, 7.1.0.x prior to 7.1.0.9, 7.5.0.x prior to 7.5.0.8, 8.0.0.x prior to 8.0.0.6, or 9.0.0.x prior to 9.0.0.1. It is, therefore, affected by multiple...
Iceni Argus Memory Corruption Vulnerability
Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files have a security vulnerability, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the application crash...
An error during signature verification can be treated as a successful verification.
Security update for signature validation on LogoutRequest/LogoutResponse. In order to verify Signatures on Logoutrequests and LogoutResponses we use the verifySignature of the class XMLSecurityKey from the xmlseclibs library. That method end up calling opensslverify depending on the signature...
Iceni Argus heap buffer overflow vulnerability (CNVD-2017-02539)
Iceni Argus is the British Iceni company's set of PDF document type conversion tool. Iceni Argus processing special PDF files there are heap buffer overflow vulnerabilities, allowing attackers can exploit the vulnerability to build malicious PDF files, inducing the user to parse, can make the...
PT-2017-9655 · Iceni · Iceni Argus
Name of the Vulnerable Software and Affected Versions: Iceni Argus affected versions not specified Description: An integer-overflow issue exists when Iceni Argus attempts to convert a malformed PDF to XML. The application tries to convert each character from a font into a polygon and then rasteri...
CVE-2016-8385
An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In mo...
Iceni Argus ipStringCreate Code Execution Vulnerability
Summary An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send file to trigger this vulnerability. Tested Versions Iceni Argus 6.6.0...
Iceni Argus TrueType Font File Cmap Table Code Execution Vulnerability
Summary An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than...
Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability
Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font’s name to a single object within an array of objects. Due to ...
CVE-2016-3013
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...
Input validation
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...
CVE-2016-3013
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...
CVE-2016-3013
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...
CVE-2016-3013
CVE-2016-3013 affects IBM WebSphere MQ 8.0 and earlier fixpacks; authenticated users can crash an MQ channel due to improper data conversion handling. IBM Security Bulletin entries describe affected versions (e.g., 8.0.0.5 and earlier), and remediation requires applying later maintenance levels: ...
CVE-2016-3013
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...
CVE-2016-9814
The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x before 1.10.3, and 2.x before 2.3.3 allows remote attackers to spoof SAML responses or possibly cause a denial of service memory consumption by leveraging...
CVE-2016-9814
The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x before 1.10.3, and 2.x before 2.3.3 allows remote attackers to spoof SAML responses or possibly cause a denial of service memory consumption by leveraging...