CVE-2017-9474

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-9471

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

CVE-2017-9117

In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff...

CVE-2017-9152

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnmloadraw function in input-pnm.c:346:41...

CVE-2017-9195

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27...

CVE-2017-9194

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29...

CVE-2017-9207

The iwgetui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image, related to imagew-jpeg.c...

CVE-2017-9206

The iwgetui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image, related to imagew-jpeg.c...

CVE-2017-9166

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:18:11...

Heap overflow

The iwgetui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image, related to imagew-jpeg.c...

CVE-2017-9165

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:17:11...

CVE-2017-9195

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27...

Heap overflow

The iwgetui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image, related to imagew-jpeg.c...

CVE-2017-9193

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33...

CVE-2017-9194

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29...

Heap overflow

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnmloadraw function in input-pnm.c:346:41...

CVE-2017-9207

The CVE-2017-9207 entry affects ImageWorsener 1.3.1, where the iw_get_ui16be function in imagew-util.c:422:24 within libimageworsener.a is vulnerable. A crafted image can trigger a heap-based buffer over-read, related to imagew-jpeg.c, leading to a denial of service. Exploitation details or in-th...

CVE-2017-9195

CVE-2017-9195 affects AutoTrace, with libautotrace.a in AutoTrace 0.31.1 exhibiting a heap-based buffer over-read in ReadImage (input-tga.c:620:27). This CVE is corroborated across multiple sources (NVD, Red Hat advisories, SUSE). Exploitation details, affected products beyond AutoTrace 0.31.1, a...

CVE-2017-9206

The vulnerability CVE-2017-9206 affects ImageWorsener 1.3.1 (libimageworsener.a); the iw_get_ui16le function in imagew-util.c:405:23 is vulnerable to a crafted image, via imagew-jpeg.c, causing a remote-denial-of-service heap-based buffer over-read. This is confirmed across multiple sources (NVD,...