Exiv2 'Action::TaskFactory::cleanup' function denial of service vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'Action::TaskFactory::cleanup' function of the actions.cpp file in Exiv2 version 0.26. A remote attacker can exploit this vulnerability to cause a denial of service...

LibSass ast.cpp File Remote Denial of Service Vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A security vulnerability exists in the ast.cpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

Exiv2 'XmpParser::terminate()' Denial of Service Vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'XmpParser::terminate' function in Exiv2 version 0.26. A remote attacker can exploit this vulnerability to cause a denial of service segmentation error with the help ...

LibSass 'lexer.hpp' heap buffer over-read vulnerability

LibSass is an open source written in C using Sass CSS extension language parser . A heap buffer out-of-bounds read vulnerability exists in the lexer.hpp file in LibSass version 3.4.5. A remote attacker can exploit this vulnerability with specially crafted input to cause a denial of service...

Exiv2 'Exiv2::Image::printIFDStructure' function denial of service vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'Exiv2::Image::printIFDStructure' function of the image.cpp file in Exiv2 version 0.26. A remote attacker can cause a denial of service infinite loop by exploiting th...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11340

CVE-2017-11340 affects Exiv2 0.26 where the Segmentation fault occurs in XmpParser::terminate() due to an exit-related issue. A crafted input can trigger a remote denial of service. Public details in the provided documents confirm the vulnerability surface in Exiv2 0.26; other connected items ind...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

PT-2017-11944 · Chicken +1 · Chicken Scheme +1

Name of the Vulnerable Software and Affected Versions: CHICKEN Scheme versions prior to 4.12.1 Description: The issue is related to an incomplete fix for a previous problem, which allows an algorithmic complexity attack. An attacker can provide crafted input that, when inserted into the symbol...

CVE-2017-1000061

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service...

Code Execution Vulnerability in China Knowledge Network CAJViewer Reader

China Knowledge CAJViewer Reader is a specialized full-text format reader for China Journal Network. A code execution vulnerability exists in CAJViewer. The vulnerability is due to insufficient program processing logic, an attacker can construct a specific string to control the address of the...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2017-11166

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...

The vulnerability of the qsort function in the NetBSD operating system, which allows a hacker to execute arbitrary code (memory corruption).

The vulnerability of the qsort function in the NetBSD operating system is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory consumption using a specially crafted input array...

Cisco IOS XR Software Incorrect Permissions Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system. The vulnerability is due to incorrect permissions that are given to a set of users. An attacker could exploit this...

GNU PSPP 'hash_int' Denial of Service Vulnerability

PSPP is a free software application for analyzing sampled data, designed to be used as a free alternative to IBM SPSS Statistics. A denial of service vulnerability exists in GNU PSPP 'hashint'. An attacker could exploit this vulnerability to cause a remote denial of service via specially designed...

GNU Libtasn1 '_asn1_check_identifier' Denial of Service Vulnerability

Libtasn1 is the ASN.1 library used by GnuTLS. A denial of service vulnerability exists in GNU Libtasn1 'asn1checkidentifier'. The vulnerability stems from the asn1checkidentifier function reading specially designed input, which can be exploited by an attacker to cause a remote denial of service...

GNU PSPP 'll_insert()' Denial of Service Vulnerability

GNU PSPP is a free application developed by the GNU Project for data sampling, statistics and analysis. libpspplibrary is one of the C libraries. A security vulnerability exists in the libpspp library llinsert function in GNU PSPP version 0.10.5-pre2. An attacker can exploit this vulnerability wi...

Null pointer dereference

The asn1checkidentifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1node structure. It may lead to a remote denial of service attack...

Null pointer dereference

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...