11324 matches found
CVE-2018-12109
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...
Security update for curl (moderate)
This update for curl to version 7.60.0 fixes the following issues: These security issues were fixed: - CVE-2018-1000300: Prevent heap-based buffer overflow when closing down an FTP connection with very long server command replies bsc1092094. - CVE-2018-1000301: Prevent buffer over-read that could...
[ASA-201806-5] firefox: arbitrary code execution
Arch Linux Security Advisory ASA-201806-5 ========================================= Severity: High Date : 2018-06-08 CVE-ID : CVE-2018-6126 Package : firefox Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-715 Summary ======= The package firefox before versi...
Qemu Slirp Networking Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Qemu. An attacker must first obtain the ability to execute code on the guest OS in order to exploit this vulnerability. The specific flaw exists within the handling of the slirp networking. The issu...
Important: curl
Issue Overview: Curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command...
CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
Heap overflow
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
CVE-2018-11438
CVE-2018-11438 affects Libmobi 0.3. The vulnerability resides in mobi_decompress_lz77 (compression.c) and allows remote code execution via a crafted MOBI file, caused by a heap-based buffer overflow. Confirmed affected component is Libmobi 0.3; the issue is exploitable over the network through cr...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
SUSE-SU-2018:1471-1 Security update for libmikmod
This update for libmikmod fixes the following issues: - CVE-2010-2546: Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to...
CVE-2018-11545
md4c 0.2.5 has a heap-based buffer overflow in mdmergelines because mdislinklabel mishandles the case of a link label composed solely of backslash escapes...
CVE-2018-11545
md4c 0.2.5 has a heap-based buffer overflow in mdmergelines because mdislinklabel mishandles the case of a link label composed solely of backslash escapes...
CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
CVE-2018-11536
md4c before 0.2.5 has a heap-based buffer overflow because mdsplitsimplepairingmark mishandles splits...
CVE-2018-11531
CVE-2018-11531 affects Exiv2 0.26 and is described as a heap-based buffer overflow in Exiv2’s getData implemented in preview.cpp. The entry lists CVSS: v2 base 7.5 (HIGH) and CVSS:3.0 base 9.8 (CRITICAL) with NETWORK attack, no authentication/UI. The provided documents do not specify a patch vers...