radare2 denial of service vulnerability (CNVD-2019-18609)

radare2 is a set of libraries and tools for working with binary files. A buffer error vulnerability exists in radare2 3.5.1 and prior versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in...

Microsoft .NET Framework Buffer Overflow Vulnerability

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...

Microsoft Edge and ChakraCore Buffer Overflow Vulnerability (CNVD-2019-27401)

Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...

Microsoft Windows Jet Database Engine Buffer Overflow Vulnerability (CNVD-2019-24836)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A buffer overflow vulnerabilit...

IBM DB2 Buffer Overflow Vulnerability (CNVD-2019-40603)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A buffer overflow vulnerability exists in IBM DB2 including: DB2 Connect Server, which originates from...

PT-2018-3378

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 3.1 Description: The issue is related to the pnv lpc do eccb function in the QEMU emulator, specifically in the hw/ppc/pnv lpc.c file. It involves a buffer data boundary read issue. Exploitation of this issue could allo...

PT-2018-3380

Name of the Vulnerable Software and Affected Versions: QEMU version 3.0.0 Description: The issue is related to the lsi do msgin function in the QEMU hardware emulator, specifically in the hw/scsi/lsi53c895a.c file. It involves a buffer data boundary read issue. Exploitation of this issue could...

Buffer overflow

A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 60,...

PT-2018-3999

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 Description The issue is related to a buffer data boundary reading vulnerability in the mms protocol of the FFmpeg multimedia library. Exploitation of this issue may allo...

PT-2018-3593

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 59 Description The issue is related to a buffer data boundary operation overflow. It may allow a remote attacker to execute arbitrary code. Memory safety bugs were reported, showing evidence of memory corruption, whic...

CVE-2018-7560

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

CVE-2018-7560

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

CVE-2018-7560: Improper Input Validation

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

PT-2018-3599

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 58 Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. The vulnerability is also described as a buffer data...

PT-2017-4214

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.6 Description The issue is related to a buffer data boundary read in the internal/dcraw common.cpp component of the LibRaw image processing library. It allows a remote attacker to cause a Denial of Service conditi...

PT-2017-4243

Name of the Vulnerable Software and Affected Versions SoX version 14.4.2 Description The issue is related to the read samples function in the hcom.c component of the SoX sound processing program, which is vulnerable to a buffer data boundary read. This can be exploited by a remote attacker using ...

PT-2017-4056

Name of the Vulnerable Software and Affected Versions libjpeg-turbo versions prior to 1.3.1 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by exploiting a buffer data boundary operation error. This can be achieved through a crafted JPEG file,...

PHP 5.1.6 - Imap_Mail_Compose() Remote Buffer Overflow

PHP 5.1.6 - ImapMailCompose Remote Buffer Overflow source: https://www.securityfocus.com/bid/23234/info PHP is prone to a buffer-overflow vulnerability because the application fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers. An attacker ca...