15213 matches found
CVE-2019-15047
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the function AP4BitReader::SkipBits at Core/Ap4Utils.cpp...
CVE-2019-15050
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4AvccAtom class at Core/Ap4AvccAtom.cpp...
CVE-2019-15049
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4Dec3Atom class at Core/Ap4Dec3Atom.cpp...
CVE-2019-15047
Bento4 1.5.1.0 contains a heap-based buffer over-read in AP4_BitReader::SkipBits (Core/Ap4Utils.cpp). This is the concrete vulnerability described across multiple connected sources. The documents do not provide patch/version remediation details or exploitation specifics. No other affected compone...
CVE-2019-15049
An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in the AP4Dec3Atom class at Core/Ap4Dec3Atom.cpp...
CVE-2019-14975
Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fzchartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string...
PHP 7.1.x < 7.1.31 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.31, 7.2.x prior to 7.2.21 or 7.3.x prior to 7.3.8. It is, therefore, affected by the following vulnerabilities: - A heap-based buffer overflow condition exists on exifscanthumbnail. An attacker can...
CVE-2019-14274
MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c...
libguestfs-winsupport security update
7.2-3 - Fix for CVE-2019-9755 heap-based buffer overflow leads to local root privilege escalation resolves: rhbz1698502...
RHEL 7 : elfutils (RHSA-2019:2197)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2197 advisory. The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code. The...
NewStart CGSL CORE 5.04 / MAIN 5.04 : freerdp Multiple Vulnerabilities (NS-SA-2019-0074)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has freerdp packages installed that are affected by multiple vulnerabilities: - FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function updatereadbitmapupdate and...
Debian: Security Advisory (DSA-4496-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NewStart CGSL MAIN 5.04 : procmail Vulnerability (NS-SA-2019-0005)
The remote NewStart CGSL host, running version MAIN 5.04, has procmail packages installed that are affected by a vulnerability: - A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, coul...
NewStart CGSL CORE 5.04 / MAIN 5.04 : keepalived Vulnerability (NS-SA-2019-0051)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has keepalived packages installed that are affected by a vulnerability: - Heap-based buffer overflow vulnerability in extractstatuscode function in lib/html.c that parses HTTP status code returned from web server allows malicio...
RHEL 7 : ovmf (RHSA-2019:2125)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2125 advisory. OVMF Open Virtual Machine Firmware is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI...
NewStart CGSL MAIN 4.05 : gnutls Multiple Vulnerabilities (NS-SA-2019-0109)
The remote NewStart CGSL host, running version MAIN 4.05, has gnutls packages installed that are affected by multiple vulnerabilities: - Stack-based buffer overflow in the cdkpkgetkeyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have...
NewStart CGSL MAIN 4.05 : poppler Vulnerability (NS-SA-2019-0118)
The remote NewStart CGSL host, running version MAIN 4.05, has poppler packages installed that are affected by a vulnerability: - An integer overflow leading to heap-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications...
SUSE SLED12 / SLES12 Security Update : tcpdump (SUSE-SU-2019:2088-1)
This update for tcpdump fixes the following issues : Security issues fixed : CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716. Note that Tenable Network...
RHEL 7 : binutils (RHSA-2019:2075)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2075 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includ...
