Heap overflow

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

CVE-2018-12932

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

CVE-2018-12932

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

CVE-2018-12932

The CVE-2018-12932 issue affects Wine (notably Wine 3.7) in the PlayEnhMetaFileRecord function (enhmetafile.c). The vulnerability arises from handling a large pAlphaBlend->cbBitsSrc value, leading to a heap-based buffer overflow. The documented impact is a denial of service and potentially uns...

CVE-2018-12932

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

Denial Of Service (DoS)

libtiff.so is susceptible to denial of service DoS attack. The attack is possible when an attacker send a malicious TIFF file to the cpSeparateBufToContigBuf function in tiffcp.c to cause a heap-based buffer overflow...

CVE-2018-12900

CVE-2018-12900 affects LibTIFF and is a heap-based buffer overflow in the function cpSeparateBufToContigBuf (tiffcp.c). Public disclosures describe that processing crafted TIFF files can cause a denial of service (crash) and may potentially lead to arbitrary code execution, depending on the envir...

CVE-2018-12889

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

Heap overflow

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

CVE-2018-12889

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

Adobe Acrobat Pro DC ImageConversion EMF EMR_STRETCHDIBITS Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Updated libvorbis packages fix security vulnerabilities

The updated packages fix security vulnerabilities: The barknoisehybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact via a crafted mp4 file. CVE-2017-14160...

CVE-2018-12699

finishstab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump...

CVE-2018-12699

CVE-2018-12699 (finish_stab in stabs.c, GNU Binutils) allows heap-based buffer overflow during objdump execution, leading to denial of service and possibly other impact. Connected records extend the issue to stab_xcoff_builtin_type in stabs.c (Binutils through 2.37), noted as related and arising ...

CVE-2018-12601

There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact...

CVE-2018-12601

There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact...

CVE-2018-12601

CVE-2018-12601 : Concrete detail available — sam2p 0.49.4 has a heap-based buffer overflow in the ReadImage function of input-tga.ci, leading to denial of service or possibly other impact. Affected component is the ReadImage routine in sam2p’s TGA input handling; the vulnerability is triggered by...

CVE-2018-12601

There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact...

CVE-2018-11724

The mobipk1decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

Integer overflow

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...