CVE-2020-28963

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

CVE-2020-28963

CVE-2020-28963 affects Passcovery ZIP Password Recovery v3.70.69.0, with a buffer overflow in the decompression function. The issue can allow an attacker with local access to overwrite local process registers, potentially compromising a local software process and elevating privileges. The vulnera...

CVE-2020-28963: Buffer Copy without Checking Size of Input

Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...

HDF5 Buffer Overflow Vulnerability (CNVD-2020-22284)

HDF5 is a suite of tools for managing and storing different types of data. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A buffer overflow vulnerability exists in the 'Decompress' function of the decompress.c file in HDF5 1.12.0...

DEBIAN-CVE-2020-10809

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service...

CVE-2020-10809

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2020-10809

An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service...

PT-2020-6977 · Hdf5 +3 · Hdf5 +3

Name of the Vulnerable Software and Affected Versions: HDF5 versions prior to 1.12.0 Description: A heap-based buffer overflow exists in the function Decompress located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary, allowing an attacker to cause Denial of...

bzip2 buffer overflow vulnerability

bzip2 is an open source compression/decompression application. A buffer error vulnerability exists in BZ2decompress in the decompress.c file in bzip2 1.0.6 and earlier versions. The vulnerability stems from a networked system or product performing operations in memory without properly validating...

PT-2018-11470

Name of the Vulnerable Software and Affected Versions Miniz version 2.0.7 Description The issue is caused by an infinite loop in the tinfl decompress function in miniz tinfl.c. This occurs because the sym2 and counter variables can both remain equal to zero. Recommendations For Miniz version 2.0....

Lizard Denial of Service Vulnerability

Lizard formerly known as LZ5 is a lossless compression software package. A security vulnerability exists in the 'LizarddecompressLIZv1' function lib/lizarddecompressliz.h file in Lizard version 1.0 and LZ5 version 2.0, which stems from the program's failure to correctly detect buffer size. A remo...

shoco API 'shoco_decompress' function denial of service vulnerability

shoco is a C language library for string compression, of which the API is a programming interface. A security vulnerability exists in the 'shocodecompress' function of the API in shoco 2017-07-17 and earlier versions. A remote attacker can exploit this vulnerability with malformed compressed data...

CVE-2017-7772

Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function...

The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.

A vulnerability exists in the SnifferDecompress function in the wireshark/Wireshark DOS sniffer processing module, located in the wiretap/ngsniffer.c file. This vulnerability arises due to improper handling of empty input data. Exploiting this vulnerability allows malicious individuals operating...

PT-2016-3293

Name of the Vulnerable Software and Affected Versions bzip2 versions 1.0.6 and earlier Description The issue is related to an out-of-bounds write in the BZ2 decompress function in decompress.c when there are many selectors. This can lead to memory corruption, resulting in a denial of service and/...

wireshark: DOS Sniffer file parser flaw (wnpa-sec-2014-19)

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not prevent data overwrites during copy operations, which allows remote attackers to cause a denial of service application crash via a crafted file...

Mandriva Update for busybox MDVSA-2012:129-1 (busybox)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ncompress: .bss buffer underflow in decompression

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

ncompress: .bss buffer underflow in decompression

The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...

bzip2: integer overflow flaw in BZ2_decompress

Integer overflow in the BZ2decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted compressed file...