ok-file-formats 缓冲区错误漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and some other file formats. A security vulnerability exists in ok-file-formats. The vulnerability stems from a heap-based buffer overflow in the okcsvcircularbufferread function in okcsv.c in ok-file-formats through 2021-04-29...

Hack-Tools

This is an offensive tool for Web Pentesters. It is a browser extension that facilitates web application penetration tests, providing cheat sheets and tools such as XSS payloads, reverse shells, and more. The extension is accessible in either popup mode or a whole tab in the Devtools part of the...

VulnCheck KEV: CVE-2011-0097

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary...

[SECURITY] Fedora 34 Update: libsndfile-1.0.31-5.fc34.fc34

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

Fedora: Security Advisory for libsndfile (FEDORA-2021-8fef82e363)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GHSA-5V34-G2PX-J4FW Improper Handling of Length Parameter Inconsistency in Apache Ant

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

[SECURITY] Fedora 33 Update: libtraceevent-1.1.1-2.fc33

libtraceevent is a library to parse raw trace event formats...

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-54724)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. An...

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-54722)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. The...

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-56432)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. The...

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-56430)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component in Oracle Outside In Technology version 8.5...

Oracle Outside In Technology has an unspecified vulnerability (CNVD-2021-54723)

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. The...

CVE-2021-35963

The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers to upload files containing malicious script to execute RCE attacks...

CVE-2020-23707

A heap-based buffer overflow vulnerability in the function okjpgdecodeblockprogressive at okjpg.c:1054 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

CVE-2020-23706

A heap-based buffer overflow vulnerability in the function okjpgdecodeblocksubsequentscan okjpg.c:1102 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

Heap overflow

A heap-based buffer overflow vulnerability in the function okjpgdecodeblocksubsequentscan okjpg.c:1102 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

CVE-2020-23707

The CVE-2020-23707 issue is in the open-source decoder ok-file-formats (through 2020-06-26). A heap-based buffer overflow occurs in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054, enabling Denial of Service via a crafted JPEG file. Public sources (Red Hat, NVD, CVE, CNNVD, PRION,...

CVE-2020-23707

A heap-based buffer overflow vulnerability in the function okjpgdecodeblockprogressive at okjpg.c:1054 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service DOS via a crafted jpeg file...

CVE-2020-23706

CVE-2020-23706 is a heap-based buffer overflow in the ok-file-formats project, triggered in the function ok_jpg_decode_block_subsequent_scan() (ok_jpg.c:1102) and exploitable by a crafted JPEG file to cause a Denial of Service. Affected versions are those with the vulnerable code up to 2020-06-26...

ok-file-formats 缓冲区错误漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. A security vulnerability exists in ok-file-formats which allows attackers to cause a denial of service DOS via a crafted jpeg file...