CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

CVE-2017-11464

CVE-2017-11464 affects GNOME librsvg 2.40.17. A SIGFPE is raised in the function box_blur_line of rsvg-filter.c during parsing of a crafted SVG file due to insufficient protection against division by zero. This can cause a crash/denial of service when processing the SVG. The connected documents c...

CVE-2017-11464

A SIGFPE is raised in the function boxblurline of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero...

PT-2017-4136 · Freedesktop.Org +2 · Poppler +2

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Poppler affected versions not specified Description: The issue is related to a division by zero error in the PostScriptFunction::exec function, specifically in the psOpIdiv case, which can lead to a denial of service. Thi...

ALPINE-CVE-2017-9344

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by zero. This was addressed in epan/dissectors/packet-btl2cap.c by validating an interval value...

Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files

Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1261 A detailed introduction to MsMpEng can be found in issue 1252 , so I will skip the background story here. Through fuzzing, we have discovered a number of ways...

Microsoft MsMpEng - Multiple Crashes While Scanning Malformed Files

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1261 A detailed introduction to MsMpEng can be found in issue 1252 , so I will skip the background story here. Through fuzzing, we have discovered a number of ways to crash the service and specifically code in the mpengine.dll...

[ASA-201704-10] libtiff: multiple issues

Arch Linux Security Advisory ASA-201704-10 ========================================== Severity: Medium Date : 2017-04-28 CVE-ID : CVE-2017-7592 CVE-2017-7593 CVE-2017-7594 CVE-2017-7595 CVE-2017-7596 CVE-2017-7597 CVE-2017-7598 CVE-2017-7599 CVE-2017-7600 CVE-2017-7601 CVE-2017-7602 Package :...

Fedora 25 : ming (2017-d43d46f1ca)

Release 0.4.8 no ABI or API changes - Add PHP7 compatibility - Fix C++ output of disassembler - Fix heap overflows in parser.c CVE-2017-7578 - Avoid division by zero in listmp3 when no valid frame was found CVE-2016-9265 - Don't try printing unknown block CVE-2016-9828 - Parse Protect tag's...

Fedora 24 : ming (2017-ed6b6a1d7a)

Release 0.4.8 no ABI or API changes - Add PHP7 compatibility - Fix C++ output of disassembler - Fix heap overflows in parser.c CVE-2017-7578 - Avoid division by zero in listmp3 when no valid frame was found CVE-2016-9265 - Don't try printing unknown block CVE-2016-9828 - Parse Protect tag's...

Greenfish Icon Editor Pro Handles ICO Files Except for Zero with Memory Corruption Vulnerability

Greenfish Icon Editor Pro is an icon, cursor, animation and icon library editor. A memory corruption vulnerability exists in Greenfish Icon Editor Pro's handling of division by zero in ICO files. An attacker can exploit this vulnerability to construct a malformed ICO file that will cause the...

DEBIAN-CVE-2017-7595

The JPEGSetupEncode function in tiffjpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the WriteTIFFImage function in the coder/tiff.c file of the console image editing tool ImageMagick is related to a division by zero error. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure termination of the application usin...

Audio File Library Denial of Service Vulnerability (CNVD-2017-03514)

Audio File Library aka audiofile is a processing library for reading and writing audio files. A denial of service vulnerability in the runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library aka audiofile allows remote attackers to cause a denial of service divide-by-zero...

PT-2016-3334 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG version 2.1.2 Description: The issue is related to a division by zero error in the OpenJPEG library, which is used for image encoding and decoding. This error can be exploited by a remote attacker to cause a denial of service. The...

The updated packages fix libtiff security vulnerabilities

The TIFFVGetField function in tifdir.c in libtiff 4.0.6 allows attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image. CVE-2015-7554 Heap-based buffer overflow in the...

VMware Workstation - vprintproxy.exe JPEG2000 Images Multiple Memory Corruptions

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called...

VMware Workstation - 'vprintproxy.exe' JPEG2000 Images Multiple Memory Corruptions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994 ships with a feature called "Virtual Printers", which enables the virtualized...

VMware Workstation - vprintproxy.exe JPEG2000 Images Multiple Memory Corruptions

VMware Workstation - vprintproxy.exe JPEG2000 Images Multiple Memory Corruptions Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850 As already discussed in a number of reports in this tracker 285, 286, 287, 288, 289, 292, VMware Workstation current version 12.1.1 build-3770994...

USN-3075-1 imlib2 vulnerabilities

Jakub Wilk discovered an out of bounds read in the GIF loader implementation in Imlib2. An attacker could use this to cause a denial of service application crash or possibly obtain sensitive information. CVE-2016-3994 Yuriy M. Kaminskiy discovered an off-by-one error when handling coordinates in...