SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:3289-1)

This update for tiff fixes the following issues : CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file. bsc1108637 CVE-2018-17101: There are two out-of-bounds write...

CVE-2018-18583

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap...

Heap overflow

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette...

CVE-2018-18582

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette...

CVE-2018-18582

CVE-2018-18582 affects LuPng (through 2017-03-10). The issue is a heap-based buffer overflow in insertByte within miniz/lupng.c during a write operation using data from a palette. Multiple sources (CNVD-2019-09763, NVD/NVD mirror, PRION) describe this as a heap overflow in LuPng’s PNG decoding/en...

CVE-2018-18583

Summary: CVE-2018-18583 affects LuPng (miniz/lupng.c). A heap-based buffer overflow occurs in the function insertByte during a write operation for data sourced from a swap, reported for LuPng up to 2017-03-10. Related records (CNVD-2019-09764) describe that this vulnerability can be exploited to ...

SUSE SLES12 Security Update : icu (SUSE-SU-2018:1401-2)

icu was updated to fix two security issues. These security issues were fixed : CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU used an integer data type that is...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:2973-2) (Spectre)

This update for qemu fixes the following security issues : CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket causing DoS bsc1098735...

Updated libtiff packages fix security vulnerabilities

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file CVE-2016-5319. In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c CVE-2017-17942. TIFFWriteScanlin...

MGASA-2018-0409 Updated libtiff packages fix security vulnerabilities

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file CVE-2016-5319. In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c CVE-2017-17942. TIFFWriteScanlin...

Heap overflow

A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc...

CVE-2018-18274

pdfalto 0.2 contains a heap-based buffer overflow in TextPage::addAttributsNode within XmlAltoOutputDev.cc. This vulnerability is documented across multiple sources (CNVD, OSV, NVD, CVE listing) with consistent description, affecting pdfalto 0.2 and enabling potential arbitrary code execution or ...

Remote Code Execution (RCE)

libtiff.so is vulnerable to remote code execution. A heap-based buffer overflow occurs in the functions gtTielSeparate and gtStripSeparate in tiffgetimage.c due to improper handling of the tile size in a TIFF file, allowing remote attackers to execute arbitrary code via a specially crafted TIFF...

CVE-2018-17942

The converttodecimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing...

CVE-2018-17942

CVE-2018-17942 affects Gnulib’s convert_to_decimal (vasnprintf.c): a heap-based buffer overflow caused by not allocating space for the trailing null during %f processing. It impacts Gnulib prior to 2018-09-23; OSV and related advisories note a security update/fix. The CVSSv3 vector is CVSS:3.0/AV...

CVE-2018-17942

The converttodecimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing...

Adobe Acrobat Pro DC EMF BMP Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:2973-1) (Spectre)

This update for qemu fixes the following security issues : CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket causing DoS bsc1098735...

CVE-2017-7908

A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls...

GE Communicator

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: Communicator Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Exploitation could allow attackers to execute arbitrary code or create a denial-of-service condition. 3...