Out-of-bounds Read

libvorbis.so is vulnerable to out-of-bounds read. The user can trigger the attack by sending a malicious audio file to mapping0forward function in mapping0.c...

Code injection

Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'script type="text/javascript" src=' line. Fix released on 2018-03-29...

Docker Notary Unauthorized Modification Vulnerability

Docker Notary is a set of tools for publishing and managing trusted content collections from Docker Inc. in the United States. A security vulnerability in the checkRoot function in the gotuf/client/client.go file in versions of Docker Notary prior to 0.1 stems from the program's failure to detect...

IBM Endpoint Manager for Remote Control on-demand Plug-in Code Execution Vulnerability

IBM Endpoint Manager for Remote Control is a set of IBM's software for managing endpoints using a single agent and a single console. on-demand plugin is one of the plugins that supports loading other plugins without installation. A security vulnerability exists in the on-demand plugin in IBM...

Apache HTTPD Remote Security Bypass Vulnerability

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. A security vulnerability exists in Apache httpd versions 2.4.0 through 2.4.29. An attacker can exploit this vulnerability by sending a special...

The vulnerability of the Microsoft Office software package arises from improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...

The vulnerability of Microsoft Excel’s spreadsheet editor lies in its improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

Microsoft Office Security Bypass Vulnerability (CNVD-2018-05883)

Microsoft Office is the United States Microsoft Microsoft company developed a suite of office software products. Excel is one of the spreadsheet processing software. A security bypass vulnerability exists in Microsoft Office, which arises from the program's failure to enforce macro settings. An...

CVE-2017-18235

An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBPSupport.cpp does not ensure nonzero widths and heights, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted .webp file...

PYSEC-2018-121

In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file...

SUSE-SU-2018:0350-1 Security update for ImageMagick

This update for ImageMagick fixes several issues. These security issues were fixed: - CVE-2018-5685: Prevent infinite loop and application hang in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field...

The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows a hacker to access user password hashes.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM exists due to the incorrect implementation of the NTLM authentication algorithm. Exploiting this vulnerability allows a malicious actor to obtain access to user password hashes through a specially crafted SCF...

CVE-2017-14520

In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd in Splash.cc, which may lead to a potential attack when handling malicious PDF files...

UBUNTU-CVE-2017-14169

In the mxfreadprimerpack function in libavformat/mxfdec.c in FFmpeg 3.3.3 - 2.4, an integer signedness error might occur when a crafted file, which claims a large "itemnum" field such as 0xffffffff, is provided. As a result, the variable "itemnum" turns negative, bypassing the check for a large...

OpenMPT and libopenmpt Heap Buffer Overflow Vulnerability

OpenMPT is an open source audio processing program . libopenmpt is a cross-platform C and C++ based audio playback library . A heap buffer overflow vulnerability exists in the soundlib/Loadpsm.cpp file in OpenMPT versions 1.26.12.00 and earlier and libopenmpt versions prior to 0.2.8461-beta26. An...

PT-2017-3890 · Faad2 +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: FAAD2 version 2.7 Description: The issue is related to the mp4ff read stts function in the common/mp4ff/mp4atom.c file of the FAAD2 audio decoder. It allows remote attackers to cause a denial of service, resulting in an invalid memory read an...

LAME II_step_one function buffer overflow vulnerability

LAME is an open source MP3 audio compression software. A buffer overflow vulnerability exists in the LAME libmpgdecoder.a/mpglib/layer2.c/IIstepone function, which allows remote attackers to exploit the vulnerability by submitting a special file that induces the user to parse it, which can crash...

CVE-2017-9130

The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder FAAC 1.28 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

A vulnerability in id3/ID3.cpp of the Mediaserver application in the Android operating system allows a hacker to trigger memory corruption and inject code into the Mediaserver context.

The vulnerability in id3/ID3.cpp of the libstagefright application in the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause memory corruption and inject code...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability in the coder/tiff.c section of the console-based graphic editor ImageMagick is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure termination of the application, or other effects through the use of a specially crafted file...