CVE-2018-7873

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

CVE-2018-7867

CVE-2018-7867 corresponds to a heap-based buffer overflow in libming 0.4.8, specifically in the getString function (util/decompile.c) during a RegisterNumber sprintf, leading to denial of service when given crafted input. The connected sources confirm this as part of a broader set of fixes for mi...

Fedora 27 : unzip (2018-ab3d1d78f3)

Fix CVE-2018-1000035 - heap based buffer overflow when opening Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Adobe Acrobat Pro DC ImageConversion EMF BMP Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Debian DLA-1297-1 : freexl security update

Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-7436 There is a heap-based buffer over-read in a pointer dereference of the parseSST function. CVE-2018-7437 There is a...

[SECURITY] [DLA 1297-1] freexl security update

Package : freexl Version : 1.0.0b-1+deb7u5 CVE ID : CVE-2018-7435 CVE-2018-7436 CVE-2018-7437 CVE-2018-7438 CVE-2018-7439 Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-743...

Simple DirectMedia Layer SDL2_image load_xcf_tile_rle Decompression Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Tested...

CVE-2018-7553

There is a heap-based buffer overflow in the pcxLoadRaster function of inpcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7553

There is a heap-based buffer overflow in the pcxLoadRaster function of inpcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7553

CVE-2018-7553 affects sam2p 0.49.4 and is described in multiple sources as a heap-based buffer overflow in pcxLoadRaster (in_pcx.cpp). Exploitation could cause denial of service or unspecified other impact. The available connected reports corroborate the vulnerability in sam2p 0.49.4, but they do...

Adobe Acrobat Pro DC ImageConversion EMF GIF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Adobe Acrobat Pro DC ImageConversion JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

CVE-2018-7487

There is a heap-based buffer overflow in the LoadPCX function of inpcx.cpp in sam2p 0.49.4. A Crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7487

CVE-2018-7487 describes a heap-based buffer overflow in the LoadPCX function (in_pcx.cpp) of sam2p 0.49.4. A crafted input may cause a denial of service or unspecified impact. The entry is corroborated by multiple connected records (CNVD-2018-06417, OSV entries) noting the same LoadPCX heap overf...

CVE-2018-7487

There is a heap-based buffer overflow in the LoadPCX function of inpcx.cpp in sam2p 0.49.4. A Crafted input will lead to a denial of service or possibly unspecified other impact...

Updated ghostscript packages fix security vulnerability

The fillthreshholdbuffer function in base/gxhtthresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document CVE-2016-10317...

openSUSE Security Update : libmad (openSUSE-2018-205)

This update for libmad fixes the following issues : - CVE-2017-8374: Fixed a heap-based buffer overflow read in madbitskip boo1036967 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Adobe Acrobat Pro DC ImageConversion EMF EMR_STRETCHDIBITS cySrc Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

openSUSE Security Update : p7zip (openSUSE-2018-188)

This update for p7zip fixes the following security issues : - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files bsc984650 - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder bsc1077725 - CVE-2018-5996: Fixed memory corruption in RAR decompression...

SUSE SLED12 / SLES12 Security Update : p7zip (SUSE-SU-2018:0464-1)

This update for p7zip fixes the following issues: Security issues fixed : - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files bsc984650 - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder bsc1077725 - CVE-2018-5996: Fixed memory corruption in RAR...