PYSEC-2017-131

There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

CVE-2017-14861

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-14866

There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

Exiv2 Image Class Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A security vulnerability exists in the Image class of the...

Exiv2 Exiv2::l2Data function heap buffer overflow vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A heap buffer overflow vulnerability exists in the Exiv2::l2Data function in types.cpp in Exiv2, which could allow an attacker to cause a denial of service via specially crafted input...

CVE-2017-14545

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000010332."...

UBUNTU-CVE-2017-14505

DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c by providing a crafted Image File as input...

STDU Viewer Buffer Overflow Vulnerability (CNVD-2017-30107)

STDU Viewer is a free file viewer that supports multiple formats. The program supports TIFF, PDF, DjVu, XPS and WWF formats. A security vulnerability exists in STDU Viewer version 1.6.375. The vulnerability can be exploited to execute arbitrary code or cause a denial of service with the help of a...

Huawei FusionSphere Command Injection Vulnerability

Huawei FusionSphere, a product of Huawei, is a cloud operating system product developed based on the OpenStack framework. Huawei FusionSphere suffers from a command injection vulnerability because the program fails to adequately validate device input. An authenticated remote attacker can exploit...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2017-32911)

Microsoft Windows 8.1 and others are operating systems released by Microsoft Corporation in the U.S. The Hyper-V component is one of the virtualization components. An information disclosure vulnerability exists in the Hyper-V component of Microsoft Windows, which arises from a program's failure t...

NetApp Data ONTAP Denial of Service Vulnerability

NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. NetApp Data ONTAP denial of service vulnerability can be exploited by an...

The vulnerability of the eMBMS kernel technology of the Linux operating system in the Android repository CAF allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the eMBMS kernel technology of the Linux operating system in the Android repository CAF is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

Design/Logic Flaw

There is an infinite loop in the nextchar function in compscan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack...

CVE-2017-13728

There is an infinite loop in the nextchar function in compscan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack...

CVE-2017-13728

There is an infinite loop in the nextchar function in compscan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack...

CVE-2017-2254

Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input...

xmlsec XML External Entity Injection Vulnerability

xmlsec is a C-based library for implementing XML security standards. An XML external entity injection vulnerability exists in xmlsec 1.2.23 and earlier versions. An attacker could exploit this vulnerability to obtain information or cause a denial of service with the help of a specially crafted...

UBUNTU-CVE-2017-13727

There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd in LibTIFF 4.0.8, related to tifdirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack...

CVE-2017-2254

Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input...