CVE-2017-16717

The CVE-2017-16717 entry affects WECON LeviStudio HMI (heap-based buffer overflow in LeviStudio HMI/Driver handling of project data) that may allow remote code execution. Public docs (ZDI-17-1001) specify exploitation requires user interaction (visiting a malicious page or opening a malicious fil...

CVE-2017-17785

CVE-2017-17785 affects GIMP 2.8.22 with a heap-based buffer overflow in the FLI import path (plug-ins/file-fli/fli.c, function fli_read_brun). The connected documents confirm the vulnerability in GIMP 2.8.22 and show IOCs and references in multiple advisories. Several advisories (OpenSUSE/SUSE an...

CVE-2017-17789

CVE-2017-17789 affects GIMP 2.8.22 with a heap-based buffer overflow in read_channel_data (plug-ins/common/file-psp.c) used when parsing PSP files. The issue is documented across multiple advisories and vendor notices, including openSUSE and Red Hat/Nessus entries, which reference a PSP importer ...

EulerOS 2.0 SP1 : python (EulerOS-SA-2017-1334)

According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - CPython aka Python up to 2.7.13 is vulnerable to an integer overflow in the PyStringDecodeEscape function in stringobject.c, resulting in heap-base...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-1386)

This update for GraphicsMagick fixes the following issues : - CVE-2017-14042: Denial of service through a large memory allocation via specially crafted PNM images boo1056550 - CVE-2017-14504: NULL pointer dereference via specially crafted PNM images boo1059721 - CVE-2017-17498: Denial of service ...

Debian DLA-1206-1 : tiff security update

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2pfree, memory...

CVE-2017-16909

An error related to the "LibRaw::panasonicloadraw" function dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image...

Libraw 0.18.5 Denial Of Service Vulnerability

Libraw version 0.8.15 suffers from a denial of service vulnerability. ====================================================================== LibRaw Multiple Denial of Service Vulnerabilities ====================================================================== Table of Contents Affected...

CVE-2017-17122

The dumprelocsinsection function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service excessive memory allocation, or heap-based buffer overflow and application crash or possibly have unspecified other...

CVE-2017-17498

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service bitstream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

SUSE SLES11 Security Update : procmail (SUSE-SU-2017:3231-1)

This update for procmail fixes the following issues: Security issue fixed : - CVE-2017-16844: Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a...

SUSE-SU-2017:3231-1 Security update for procmail

This update for procmail fixes the following issues: Security issue fixed: - CVE-2017-16844: Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a...

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-17124

The bfdcoffreadstringtable function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service excessive memory consumption, ...

Heap overflow

The bfdcoffreadstringtable function in coffgen.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service excessive memory consumption, ...

CVE-2017-17130

CVE-2017-17130 affects Libav 12.2 via the ff_free_picture_tables function in libavcodec/mpegpicture.c. The vulnerability allows remote attackers to trigger a heap-based buffer overflow and application crash (potentially causing other impact) by processing a crafted file, related to vc1_decode_i_b...

CVE-2017-17095

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service TIFFSetupStrips heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file...

CVE-2017-17095

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service TIFFSetupStrips heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file...

CVE-2017-17095

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service TIFFSetupStrips heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file...

CVE-2017-1000158

CPython aka Python up to 2.7.13 is vulnerable to an integer overflow in the PyStringDecodeEscape function in stringobject.c, resulting in heap-based buffer overflow and possible arbitrary code execution...