634 matches found
PT-2018-6658
Name of the Vulnerable Software and Affected Versions: brace-expansion versions prior to 1.1.7 Description: The issue concerns a Regular Expression Denial of Service ReDoS condition. It can be triggered by an expand argument containing many comma characters. There is a proof of concept...
SQL Injection Vulnerability in ThinkLC Classifieds Expand.php Page
ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the thinkLC Classified Information System expand.php page. The vulnerability is caused due to the system failing to effectively filter...
Sound eXchange Buffer Overflow Vulnerability (CNVD-2017-34599)
Sound eXchange SoX is a set of open source audio processing tools. The tool supports playback, conversion and recording of multiple audio format files. A stack buffer overflow vulnerability exists in the 'lsxmsadpcmblockexpandi' function of the adpcm.c file in SoX version 14.4.2. An attacker can...
PT-2017-14030
Name of the Vulnerable Software and Affected Versions Sound eXchange SoX version 14.4.2 Description A stack-based buffer overflow issue exists in the lsx ms adpcm block expand i function of adpcm.c. This can be triggered by a crafted input, leading to a denial of service attack during the...
PoDoFo Denial of Service Vulnerability (CNVD-2017-04559)
PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in the PoDoFo :: PdfPainter :: ExpandTabs function in PdfPainter.cpp in PoDoFo version 0.9.5, where a remote attacker can cause a denial of service heap buffer overflow and...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds. The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document. Remediation...
Security update for java-1_7_0-openjdk (important)
This update for java-170-openjdk fixes the following issues: - Oracle Critical Patch Update of January 2017 to OpenJDK 7u131 bsc1020905: Security Fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolution -...
PT-2017-7727 · Unrtf +1 · Unrtf +1
Name of the Vulnerable Software and Affected Versions: unrtf version 0.21.9 Description: The issue is caused by multiple stack-based buffer overflows that allow remote attackers to cause a denial-of-service. This can be achieved by writing a negative integer to the 1 cmd expand function, 2 cmd...
DEBIAN-CVE-2016-9180
perl-XML-Twig: The option to expandexternalents, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting...
V8: integer overflow leading to buffer overflow in Zone::New
An integer-overflow flaw was found in V8's Zone class when allocating new memory Zone::New and Zone::NewExpand. An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges...
DEBIAN-CVE-2014-6272
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...
SUSE-SU-2015:1439-1 Security update for perl-XML-LibXML
perl-XML-LibXML was updated to fix the expandentities option to be preserved in all cases. CVE-2015-3451...
Google Chrome DoS
The vulnerability of the CJBig2Image::expand function in Google Chrome browsers is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by manipulating input data remotely...
CVE-2015-1279
Integer overflow in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via large height and stride value...
UBUNTU-CVE-2015-1279
Integer overflow in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via large height and stride value...
CVE-2015-1279
CVE-2015-1279 : Integer overflow in CJBig2_Image::expand within PDFium (fxcodec/jbig2/JBig2_Image.cpp) used by Google Chrome before 44.0.2403.89 leads to a heap-based buffer overflow when processing large height/stride values. Impact described as remote denial of service (and unspecified other im...
CVE-2015-1279: Undefined Security Weakness
Integer overflow in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via large height and stride value...
CVE-2015-1279
Integer overflow in the CJBig2Image::expand function in fxcodec/jbig2/JBig2Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via large height and stride value...
PT-2015-1565
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera affected versions not specified Description The issue is related to an integer overflow in the CJBig2 Image::expand function, which can cause a heap-based buffer overflow. This allows remote...
