3241 matches found
Directory traversal
Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...
CVE-2018-0496
Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...
CVE-2018-0496
Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...
DEBIAN-CVE-2018-0496
Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...
CVE-2018-0496
CVE-2018-0496 affects DFArc and DFArc2’s D-Mod extractor (and RTsoft’s Dink Smallwood HD / ProtonSDK before 3.14). A directory traversal flaw allows an attacker to overwrite arbitrary files on the user’s system. Connected advisories confirm vulnerable components include the D-Mod extractor in DFA...
CVE-2018-0496
Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...
CVE-2018-0496: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...
PT-2018-8859
Name of the Vulnerable Software and Affected Versions DFArc versions prior to 3.14 DFArc2 versions prior to 3.14 Dink Smallwood HD versions prior to 3.14 Description The issue is related to directory traversal in the D-Mod extractor, which can be exploited by an attacker to overwrite arbitrary...
CVE-2017-13254
A other vulnerability in the Android media framework AACExtractor. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70239507...
CVE-2017-0855
In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not need...
PT-2017-14781
Name of the Vulnerable Software and Affected Versions GNU Libextractor version 1.6 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted file of specific formats, including GIF, IT, NSFE, S3M, SID, ...
GNU Libextractor 'EXTRACTOR_dvi_extract_method' Function Denial of Service Vulnerability
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in the 'EXTRACTORdviextractmethod' function in the plugins/dviextractor.c file in GNU Libextractor version 1.4. A remote attacker can exploit this vulnerability ...
UBUNTU-CVE-2017-15922
In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTORdviextractmethod function in plugins/dviextractor.c...
DEBIAN-CVE-2017-15922
In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTORdviextractmethod function in plugins/dviextractor.c...
GNU Libextractor Denial of Service Vulnerability (CNVD-2017-32360)
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in the 'EXTRACTORnsfeextractmethod' function in the plugins/nsfeextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this vulnerability to...
GNU Libextractor Heap Buffer Overflow Vulnerability
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A heap-based buffer overflow vulnerability exists in the 'EXTRACTORpngextractmethod' function in the plugins/pngextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this...
GNU Libextractor Null Pointer Backreference Vulnerability
GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A security vulnerability exists in the 'EXTRACTORnsfextractmethod' function in the plugins/nsfextractor.c file in GNU Libextractor version 1.4. An attacker can exploit this vulnerability to cau...
UBUNTU-CVE-2017-15601
In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTORpngextractmethod function in plugins/pngextractor.c, related to processiTXt and stndup...