SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:1140-1)

This update for ghostscript-library fixes several issues. These security issues were fixed : - CVE-2017-7207: The memgetbitsrectangle function allowed remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document bsc1030263. - CVE-2016-9601: Prevent...

Foxit Reader U3D Texture Width Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D...

CVE-2016-10722

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the markreservedsectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected...

CVE-2016-10721

The CVE-2016-10721 entry concerns Partclone 0.2.87, specifically the partclone.restore code path. It describes a heap-based buffer overflow caused by insufficient validation of the partclone image header, enabling arbitrary code execution in the context of the user running the affected applicatio...

CVE-2016-10722

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the markreservedsectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected...

SUSE-SU-2018:1129-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - security update png.c CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. Attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file. bsc1086773 CVE-2018-10177: there i...

Denial Of Service (DoS) Through Integer Underflow

libtiff.so is vulnerable to denial of service DoS through integer underflow attacks. The vulnerability exists in DECLAREcpFunc of tiffcp.c where a heap-based buffer under read can occur, causing the DoS attack...

EulerOS 2.0 SP1 : libtiff (EulerOS-SA-2018-1102)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Off-by-one error in the t2preadwritepdfimagetile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impa...

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

CVE-2018-10392

mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service heap-based buffer overflow or over-read or possibly have unspecified other impact via a crafted file...

CVE-2018-10372

processcutuindex in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted binary file, as demonstrated by readelf...

CVE-2018-10372

processcutuindex in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted binary file, as demonstrated by readelf...

CVE-2018-10372

processcutuindex in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted binary file, as demonstrated by readelf...

CVE-2017-2923

An exploitable heap based buffer overflow vulnerability exists in the 'readbiffnextrecord function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2017-2923

An exploitable heap based buffer overflow vulnerability exists in the 'readbiffnextrecord function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2017-2924

The CVE-2017-2924 vulnerability affects FreeXL 1.0.3, with a heap-based buffer overflow in the read_legacy_biff function. A specially crafted XLS file can trigger memory corruption, leading to remote code execution. Exploitation involves sending a malicious XLS to the vulnerable library. Public r...

CVE-2017-2923

An exploitable heap based buffer overflow vulnerability exists in the 'readbiffnextrecord function' of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2018-10120

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service heap-based buffer overflow with write access or possibly have unspecifie...

(0Day) Advantech WebAccess HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess HMI Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...