libreoffice/wmffuzzer: Global-buffer-overflow in ImplUnicodeToDBCS

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4981819731607552 Project: libreoffice Fuzzer: libFuzzerlibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libreoffice/docxfuzzer: Global-buffer-overflow in basegfx::utils::UnoPolygonBezierCoordsToB2DPolygon

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6280654500134912 Project: libreoffice Fuzzer: libFuzzerlibreofficedocxfuzzer Fuzz target binary: docxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...

libtsm/libtsm_fuzzer: Global-buffer-overflow in vte_write_debug

Project: git://people.freedesktop.org/dvdhrm/libtsm Detailed report: https://oss-fuzz.com/testcase?key=4610447732899840 Project: libtsm Fuzzer: libFuzzerlibtsmfuzzer Fuzz target binary: libtsmfuzzer Job Type: libfuzzerasanlibtsm Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

chakra: Global-buffer-overflow in ThreadContext::FindPropertyRecord

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=6605684912160768 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x564aec3d7b98 Crash State:...

capstone/fuzz_disasmnext: Global-buffer-overflow in evm_insn_find

Detailed report: https://oss-fuzz.com/testcase?key=4918215883882496 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000009cf9bc Crash State:...

ffmpeg/ffmpeg_AV_CODEC_ID_AC3_fuzzer: Global-buffer-overflow in ac3_decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5116430537195520 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDAC3fuzzer Fuzz target binary: ffmpegAVCODECIDAC3fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Cras...

imagemagick/encoder_heic_fuzzer: Global-buffer-overflow in void scale_coefficients_internal<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5163584504987648 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Global-buffer-overflow in void scale_coefficients_internal<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4817879091380224 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

gdal/gdal_translate_fuzzer: Global-buffer-overflow in GDALResampleChunk32R_Gauss

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6598129781571584 Project: gdal Fuzzer: aflgdaltranslatefuzzer Fuzz target binary: gdaltranslatefuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

ffmpeg/ffmpeg_AV_CODEC_ID_MPEG4_fuzzer: Global-buffer-overflow in dct_unquantize_mpeg2_intra_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6536620682510336 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDMPEG4fuzzer Fuzz target binary: ffmpegAVCODECIDMPEG4fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 1...

dlplibs/mpfuzzer: Global-buffer-overflow in libwps_tools_win::unicodeFromMacSymbol

Detailed report: https://oss-fuzz.com/testcase?key=5162371531145216 Project: dlplibs Fuzzer: libFuzzerdlplibsmpfuzzer Fuzz target binary: mpfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000a8e9dc Crash State:...

libreoffice/wmffuzzer: Global-buffer-overflow in ImplUnicodeToDBCS

Detailed report: https://oss-fuzz.com/testcase?key=5743901215293440 Project: libreoffice Fuzzer: afllibreofficewmffuzzer Fuzz target binary: wmffuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address: 0x000002c556aa Crash State:...

spidermonkey: Global-buffer-overflow in js::Fprinter::put

Detailed report: https://oss-fuzz.com/testcase?key=4895038040440832 Project: spidermonkey Fuzzer: jsfuzzer Job Type: asanspidermonkey Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x000003826a31 Crash State: js::Fprinter::put JSString::dumpRepresentationHeader...

[SECURITY] [DLA 1240-1] ming security update

Package : ming Version : 1:0.4.4-1.1+deb7u6 CVE ID : CVE-2017-11732 CVE-2017-16883 CVE-2017-16898 Multiple vulnerabilities have been discovered in Ming: CVE-2017-11732 heap-based buffer overflow vulnerability in the function dcputs util/decompile.c in Ming = 0.4.8, which allows attackers to cause...

libxml2/libxml2_xml_read_memory_fuzzer: Global-buffer-overflow in xmlParseQName

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=6683819592646656 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type:...

dlplibs/pubfuzzer: Global-buffer-overflow in getPosixID

Detailed report: https://oss-fuzz.com/testcase?key=5692113388830720 Project: dlplibs Fuzzer: afldlplibspubfuzzer Fuzz target binary: pubfuzzer Job Type: aflasandlplibs Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000008d0ae0 Crash State: getPosixID...

openSUSE Security Update : optipng (openSUSE-2017-1320)

This update for optipng fixes the following issues : Security issue fixed : - CVE-2017-1000229: Fix integer overflow bug in function minitiffreadinfo allows an attacker to remotely execute code or cause denial of service boo1068720. - CVE-2017-16938: Fix a global buffer overflow that allows...

MGASA-2017-0447 Updated optipng packages fix security vulnerability

CVE-2017-1000229: Fix integer overflow bug in function minitiffreadinfo allows an attacker to remotely execute code or cause denial of service. - CVE-2017-16938: Fix a global buffer overflow that allows attackers to cause DoS via a maliciously crafted GIF file...

PT-2017-14645

Name of the Vulnerable Software and Affected Versions OptiPNG version 0.7.6 Description A global buffer overflow allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte...

CVE-2017-16898

The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264...