OpenSSL 'EVP_DecodeUpdate' Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. A denial of service vulnerability exists in OpenSSL. Due to an integer underflow within the EVPDecodeUpdate function located within...

FreeBSD : OpenSSL -- multiple vulnerabilities (9d15355b-ce7c-11e4-9db0-d050992ecde8) (FREAK)

OpenSSL project reports : - Reclassified: RSA silently downgrades to EXPORTRSA Client CVE-2015-0204. OpenSSL only. - Segmentation fault in ASN1TYPEcmp CVE-2015-0286 - ASN.1 structure reuse memory corruption CVE-2015-0287 - PKCS7 NULL pointer dereferences CVE-2015-0289 - Base64 decode CVE-2015-029...

DEBIAN-CVE-2015-0292

Integer underflow in the EVPDecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact v...

Vulnerability in OpenSSL - Base64 decode

A vulnerability existed in previous versions of OpenSSL related to the processing of base64 encoded data. Any code path that reads base64 data from an untrusted source could be affected such as the PEM processing routines. Maliciously crafted base 64 data could trigger a segmenation fault or memo...

jasper: heap overflow in jp2_decode() (oCERT-2014-012)

A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

chromium-browser: Out-of-bounds read in vpxdecoder

The VpxVideoDecoder::VpxDecode function in media/filters/vpxvideodecoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service out-of-bounds...

PT-2015-4307

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.5.2 Description The issue is related to the vmd decode function in libavcodec/vmdvideo.c, which does not validate the relationship between a certain length value and the frame width. This allows remote attackers to...

PT-2014-1944

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.2 Description The issue is related to an off-by-one error in the ecryptfs decode from filename function in the eCryptfs subsystem. This error can be exploited by local users to cause a denial of service,...

UBUNTU-CVE-2014-9843

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors...

phpyun v3.2 (20141222) 无需登录无视过滤注入一枚。

简要描述： 无需登录。 最新版本。 demo测试。 功能越多 bug越多 bug越多 rank越多。 详细说明： 在model/subscribe.class.php中 function certaction if$GET'id' $arr=@explode"|",base64decode$GET'id';//当时我就震惊了。。。 $email = $arr0; $code = $arr1; $nid=$this-obj-DBupdateall"subscribe","status='1'","email='".$email."' and code='".$code."'";...

jasper: heap overflow in jp2_decode() (oCERT-2014-012)

A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

PT-2014-8428

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to a heap-based buffer overflow in the jp2 decode function, which can be triggered by a crafted JPEG 2000 file. This can cause a denial of service crash or possibly allow...

DEBIAN-CVE-2014-1569

The definitelengthdecoder function in lib/util/quickder.c in Mozilla Network Security Services NSS before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long...

PT-2014-8931

Name of the Vulnerable Software and Affected Versions FFMpeg versions prior to 2.1.6 FFMpeg versions 2.2.x through 2.3.x FFMpeg versions 2.4.x prior to 2.4.4 Description The issue allows remote attackers to cause a denial of service and possibly have other unspecified impact via vectors related t...

PT-2014-8934

Name of the Vulnerable Software and Affected Versions FFMpeg versions prior to 2.1.6 FFMpeg versions 2.2.x through 2.3.x FFMpeg versions 2.4.x prior to 2.4.4 Description The issue allows remote attackers to cause a denial of service out-of-bounds access via a crafted .bit file. This is due to a...

PT-2014-8374

Name of the Vulnerable Software and Affected Versions Cisco OpenH264 versions 1.2.0 and earlier Description The issue is related to a use-after-free vulnerability in the decode slice.cpp file. This vulnerability allows remote attackers to execute arbitrary code via an encoded media file...

UBUNTU-CVE-2014-8562

DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read...

PT-2014-8620

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.8.9-9 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, through DCM decode in ImageMagick. Recommendations For versions prior to 6.8.9-9, update to...

[SECURITY] Fedora 20 Update: libkdcraw-4.14.1-1.fc20

Libkdcraw is a C++ interface around LibRaw library used to decode RAW picture files. More information about LibRaw can be found at http://www.libraw.org...

Wireshark 1.10.x < 1.10.9 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.10.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.9 advisory. - The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in...