CVE-2017-7982

Integer overflow in the plistfrombin function in bplist.c in libimobiledevice/libplist before 2017-04-19 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted plist file...

CVE-2017-7982

CVE-2017-7982 affects libimobiledevice/libplist (plist_from_bin in bplist.c). An integer overflow in plist_from_bin allows a crafted plist file to trigger a heap-based buffer over-read and application crash, enabling a denial of service. Affected: libplist prior to 2017-04-19. CVSS metrics indica...

PT-2017-18044

Name of the Vulnerable Software and Affected Versions libimobiledevice/libplist versions prior to 2017-04-19 Description The issue is related to an integer overflow in the plist from bin function in bplist.c, which allows remote attackers to cause a denial of service, resulting in a heap-based...

CVE-2017-7960

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...

Heap overflow

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...

CVE-2017-7960

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...

CVE-2017-7960

Removed by vendor...

CVE-2017-7960

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...

CVE-2017-7960

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...

CVE-2017-7960: Out-of-bounds Read

The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted CSS file...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2017:1042-1)

This update for curl fixes the following issues: Security issue fixed : - CVE-2016-9586: libcurl printf floating point buffer overflow bsc1015332 - CVE-2017-7407: The ourWriteOut function in toolwriteout.c in curl might have allowed physically proximate attackers to obtain sensitive information...

CVE-2017-7885

CVE-2017-7885: Artifex jbig2dec 0.13 has a heap-based buffer over-read/integer overflow in jbig2_decode_symbol_dict (libjbig2dec.a) when processing crafted JBIG2 files, causing application crash or potential information disclosure. Connected sources also reference related issues in jbig2dec and j...

CVE-2017-7854

The consumeinitexpr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...

CVE-2017-7854

The CVE-2017-7854 entry concerns radare2 1.3.0, where the consume_init_expr function in wasm.c allows a remote attacker to trigger a denial of service via a crafted WebAssembly file. The vulnerability is described as a heap-based buffer over-read leading to an application crash. Public documents ...

CVE-2017-7854

The consumeinitexpr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...

PT-2017-17956

Name of the Vulnerable Software and Affected Versions radare2 version 1.3.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted Web Assembly file. This is due to a problem in the consume init...

CVE-2017-7716

The readu32leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...

CVE-2017-7716

The readu32leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...

Heap overflow

The readu32leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...

CVE-2017-7716

The readu32leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...