3198 matches found
MGASA-2018-0409 Updated libtiff packages fix security vulnerabilities
Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file CVE-2016-5319. In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c CVE-2017-17942. TIFFWriteScanlin...
CVE-2018-18480
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash...
CVE-2018-18480
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash...
CVE-2018-18480
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash...
CVE-2018-18455
The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
Heap overflow
CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-18455
The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-18454
CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-18454
CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-18455
The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-18454
CVE-2018-18454 is a vulnerability in Xpdf/Poppler where CCITTFaxStream::readRow() in Stream.cc (Xpdf 4.00) can crash or exhaust memory via a crafted PDF, enabling a heap-based buffer over-read and denial of service. Connected advisories cite multiple affected builds (Xpdf 4.00, 4.01.01; Poppler 0...
CVE-2018-18454
CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-18455
The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
PT-2018-14469
Name of the Vulnerable Software and Affected Versions Xpdf version 4.00 Description The issue allows remote attackers to cause a denial of service via a crafted pdf file. This can be achieved by exploiting the GfxImageColorMap class in GfxState.cc. A demonstration of this exploit is possible usin...
CVE-2018-18480: Out-of-bounds Read
A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash...
CVE-2018-18455: Out-of-bounds Read
The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-18454: Out-of-bounds Read
CCITTFaxStream::readRow in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted pdf file, as demonstrated by pdftoppm...
CVE-2018-18407
A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The issue gets triggered in the function csumreplace4 in incrementalchecksum.h, causing a denial of service...
PT-2018-14443
Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.0 beta1 Description A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay, during the incremental checksum operation. The issue gets triggered in the function csum replace4 in incremental...