3283 matches found
CVE-2017-1000414
ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...
Design/Logic Flaw
ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...
CVE-2017-1000414
ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...
CVE-2017-1000414
ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service...
GNU Libtasn1 '_asn1_decode_simple_ber' function stack exhaustion vulnerability
GNU Libtasn1 is an ASN.1 architecture management library for use in GnuTLS a secure communications library that implements the SSL, TLS, and DTLS protocols by software developer Fabio Fiorina. A security vulnerability exists in the 'asn1decodesimpleber' function in the decoding.c file in GNU...
CVE-2018-6003
An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...
DEBIAN-CVE-2018-5248
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixeldecode function...
UBUNTU-CVE-2018-5248
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixeldecode function...
Foxit Reader LZWDecode Information Disclosure Vulnerability
Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An information disclosure vulnerability exists in Foxit Reader version 8.3.2.25013, which occurs when the program fails to properly validate user-submitted data. The vulnerability can be exploited by a remote attacke...
HDF5 Out-of-Bounds Write Vulnerability
HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. An out-of-bounds write vulnerability exists in the 'H5Gentdecodevec' function of H5Gcache.c in libhdf5.a in HDF5 version 1.10.1...
HDF5 'H5Opline_pline_decode' function out-of-bounds read vulnerability
HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. An out-of-bounds read vulnerability exists in the 'H5Oplineplinedecode' function of the H5Opline.c file in the libhdf5.a file in...
UBUNTU-CVE-2017-17506
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Oplineplinedecode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...
DEBIAN-CVE-2017-17506
In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5Oplineplinedecode in H5Opline.c in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...
UBUNTU-CVE-2017-17505
In HDF5 1.10.1, there is a NULL pointer dereference in the function H5Oplinedecode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...
DEBIAN-CVE-2017-17505
In HDF5 1.10.1, there is a NULL pointer dereference in the function H5Oplinedecode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file...
CVE-2017-17127
The vc1decodeframe function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...
Axis Communications MPQT/PACS Heap Overflow / Information Leakage Vulnerabilities
Axis Communications MPQT/PACS suffers from heap overflow and information leakage vulnerabilities. STX Subject: Axis Communications MPQT/PACS Heap Overflow and Information Leakage. Attack vector: Remote Authentication: Anonymous no credentials needed Researcher: bashis August 2017 PoC:...
librawspeed/RawParserFuzzer-GetDecoder-Decode: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized
Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6696296816574464 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawParserFuzzer-GetDecoder-Decode Fuzz target binary: RawParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...
DEBIAN-CVE-2017-1000158
CPython aka Python up to 2.7.13 is vulnerable to an integer overflow in the PyStringDecodeEscape function in stringobject.c, resulting in heap-based buffer overflow and possible arbitrary code execution...
ALPINE-CVE-2017-1000158
CPython aka Python up to 2.7.13 is vulnerable to an integer overflow in the PyStringDecodeEscape function in stringobject.c, resulting in heap-based buffer overflow and possible arbitrary code execution...