tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource temporarily unavailable" error and daemon crash) via a long URL.

...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the bfdelfgetstrsection function in the bfd/elf.c file. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - POC Credit: John Reiser...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev921-g422b78ecf-master, which stems from the discovery of swfgetstring via scenemanager/swfparse.c:325 that contains an out-of-bounds write vulnerability...

PT-2024-22388 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac version 2.3-DEV-rev921-g422b78ecf-master Description: The issue is related to an out of boundary write vulnerability via the swf get string function at scene manager/swf parse.c:325. This vulnerability can be exploited by a remote attack...

DEBIAN-CVE-2022-37052

A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject...

DEBIAN-CVE-2023-38855

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the getstring function in xlstool.c:395...

PT-2023-26637 · Libxls +1 · Libxls +1

Name of the Vulnerable Software and Affected Versions: libxlsv version 1.6.2 Description: The issue allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get string function in xlstool.c:411. Recommendations: For libxlsv version 1.6.2,...

CVE-2021-46527

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsgetcstring at src/mjsstring.c...

CVE-2020-22884

Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE2V09, allows remote attackers to execute arbitrary code...

CVE-2020-29203

struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2JSTRUCTGETstringELEMENT...

AZL-37054 CVE-2019-17414 affecting package vino 3.22.0-20

tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service "vngetstring error: Resource temporarily unavailable" error and daemon crash via a long URL...

DEBIAN-CVE-2018-20551

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c...