PT-2018-6740

Name of the Vulnerable Software and Affected Versions: JerryScript version 1.0 Description: An issue was discovered in the lit read code unit from hex function in lit/lit-char-helpers.c, which can be exploited via a RegExp"x0" payload, resulting in a heap-based buffer over-read. Recommendations:...

Updated TiMidity++ packages fix security vulnerabilities

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option CVE-2017-11546. The resamplegauss function in...

Heap overflow

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

CVE-2017-18198

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

CVE-2017-18198

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

CVE-2017-18198

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

CVE-2017-18198: Out-of-bounds Read

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

Heap overflow

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...

CVE-2018-7435

FreeXL (lib freexl) — CVE-2018-7435: heap-based buffer over-read in freexl::destroy_cell in versions before 1.0.5. Impact noted as potential denial of service; advisories (Debian, Gentoo, Red Hat/openSUSE/NASL) recommend upgrading to 1.0.5 or later. No exploitation details provided in the supplie...

CVE-2018-7439

The CVE-2018-7439 issue affects FreeXL up to version 1.0.4; it is a heap-based buffer over-read in read_mini_biff_next_record. Exploitation could impact confidentiality, integrity, and availability (CVSS3: High). Mitigation: upgrade to FreeXL 1.0.5 or later (per the description). If you need furt...

CVE-2018-7436

CVE-2018-7436 affects FreeXL prior to 1.0.5 and is caused by a heap-based buffer over-read in the parse_SST function. Impact details in sources indicate vulnerability could lead to partial confidentiality/integrity/availability concerns; CVSS data from NVD shows base scores of 6.8 (2.0) and 8.8 (...

CVE-2018-7437

CVE-2018-7437 affects FreeXL (library used to read Excel files). The issue is a heap-based buffer over-read in a memcpy call within parse_SST, fixed in FreeXL versions 1.0.5 and later. Impact is potential memory safety violation; exploitation details are not provided in the available documents. R...

PT-2018-18072

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in the parse unicode string function. This issue affects versions prior to 1.0.5. Recommendations For versions pri...

PT-2018-18071

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in a memcpy call of the parse SST function. This issue affects versions prior to 1.0.5. Recommendations For versio...

PT-2018-18070

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in a pointer dereference of the parse SST function. This issue affects versions prior to 1.0.5. Recommendations Fo...

PT-2018-18069

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in the freexl::destroy cell function. This issue affects versions prior to 1.0.5. Recommendations For versions pri...

PT-2018-18073

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description An issue was discovered in FreeXL, where there is a heap-based buffer over-read in the read mini biff next record function. This issue affects versions prior to 1.0.5. Recommendations For versions pri...

CVE-2018-7437: Out-of-bounds Read

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parseSST function...

CVE-2018-7436: Out-of-bounds Read

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parseSST function...

CVE-2018-7435: Out-of-bounds Read

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the freexl::destroycell function...