libarchive contains a heap-based buffer overflow due to improper input validation

Overview An attacker may be able to coerce a user into executing arbitrary code in the context of the current user by attempting to unzip a crafted zip file provided by the attacker. Description CWE-20: Improper Input Validation - CVE-2016-1541A crafted zip file can provide an incorrect compresse...

CVE-2016-4415

wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted file...

Heap overflow

wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted file...

CVE-2016-4415

wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted file...

CVE-2016-4415

Wireshark 2.x before 2.0.2 is affected by CVE-2016-4415 due to a bug in wiretap/vwr.c (IxVeriWave file parser) that incorrectly increases an octet count. A remote attacker can craft a file to trigger a heap-based buffer overflow, causing a denial of service (application crash). A fix is available...

Oracle GlassFish Server DoS Vulnerability (cpuapr2016v3)

Oracle GlassFish Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

Integer overflow

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

CVE-2016-3074

CVE-2016-3074 is a heap-based buffer overflow in GD Graphics Library (libgd/libgd2) caused by a signedness error when processing crafted compressed gd2 data. The vulnerability can lead to a crash or potentially remote code execution. Affected software centers on libgd2/gd2 components (GD library,...

CVE-2016-3074

Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow...

PostgreSQL 9.1 < 9.1.20 / 9.2 < 9.2.15 / 9.3 < 9.3.11 / 9.4 < 9.4.6 / 9.5 < 9.5.1 Multiple Vulnerabilities

Binary data 9264.prm...

CVE-2016-3977

CVE-2016-3977 is a heap-based buffer overflow in util/gif2rgb.c of giflib 5.1.2. The vulnerability allows a remote attacker to cause an application crash (DoS) by supplying a GIF with a crafted background color index. Connected documents confirm the issue in giflib 5.1.2 and describe the impact a...

Important: postgresql8

Issue Overview: An integer overflow flaw, leading to a heap-based buffer overflow, was found in the PostgreSQL handling code for regular expressions. A remote attacker could use a specially crafted regular expression to cause PostgreSQL to crash or possibly execute arbitrary code. Affected...

Heap overflow

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

CVE-2015-7552

CVE-2015-7552 is a heap-based buffer overflow in gdk-pixbuf_flip (gdk-pixbuf-scale.c) affecting gdk-pixbuf 2.30.x. Exploitation can cause denial of service or potentially allow arbitrary code execution via a crafted BMP file. The connected documents confirm affected components and impact, with mu...

CVE-2015-7552

Heap-based buffer overflow in the gdkpixbufflip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP file...

CVE-2016-1503

dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a malform...

openSUSE Security Update : perl-YAML-LibYAML (openSUSE-2016-473)

perl-YAML-LibYAML was updated to fix three security issues. These security issues were fixed : - CVE-2013-6393: The yamlparserscantaguri function in scanner.c in LibYAML before 0.1.5 performed an incorrect cast, which allowed remote attackers to cause a denial of service application crash and...