CVE-2018-7436

CVE-2018-7436 affects FreeXL prior to 1.0.5 and is caused by a heap-based buffer over-read in the parse_SST function. Impact details in sources indicate vulnerability could lead to partial confidentiality/integrity/availability concerns; CVSS data from NVD shows base scores of 6.8 (2.0) and 8.8 (...

CVE-2018-7436

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parseSST function...

CVE-2018-7435

FreeXL (lib freexl) — CVE-2018-7435: heap-based buffer over-read in freexl::destroy_cell in versions before 1.0.5. Impact noted as potential denial of service; advisories (Debian, Gentoo, Red Hat/openSUSE/NASL) recommend upgrading to 1.0.5 or later. No exploitation details provided in the supplie...

CVE-2018-7439

The CVE-2018-7439 issue affects FreeXL up to version 1.0.4; it is a heap-based buffer over-read in read_mini_biff_next_record. Exploitation could impact confidentiality, integrity, and availability (CVSS3: High). Mitigation: upgrade to FreeXL 1.0.5 or later (per the description). If you need furt...

CVE-2018-7437

CVE-2018-7437 affects FreeXL (library used to read Excel files). The issue is a heap-based buffer over-read in a memcpy call within parse_SST, fixed in FreeXL versions 1.0.5 and later. Impact is potential memory safety violation; exploitation details are not provided in the available documents. R...

openSUSE Security Update : libmad (openSUSE-2018-205)

This update for libmad fixes the following issues : - CVE-2017-8374: Fixed a heap-based buffer overflow read in madbitskip boo1036967 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Adobe Acrobat Pro DC ImageConversion EMF EMR_STRETCHDIBITS cySrc Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

CVE-2018-1165

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

Adobe Acrobat Pro DC ImageConversion XPS TIFF dir count Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Adobe Acrobat Pro DC OCG setIntent Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

openSUSE Security Update : p7zip (openSUSE-2018-188)

This update for p7zip fixes the following security issues : - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files bsc984650 - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder bsc1077725 - CVE-2018-5996: Fixed memory corruption in RAR decompression...

SUSE SLED12 / SLES12 Security Update : p7zip (SUSE-SU-2018:0464-1)

This update for p7zip fixes the following issues: Security issues fixed : - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files bsc984650 - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder bsc1077725 - CVE-2018-5996: Fixed memory corruption in RAR...

SUSE SLES11 Security Update : unzip (SUSE-SU-2018:0465-1)

This update for unzip fixes the following issues : - CVE-2018-1000035: Fixed a heap-based buffer overflow in password protected ZIP archives bsc1080074 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

Heap overflow

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...

CVE-2018-7253

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...

CVE-2018-7253

The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service heap-based buffer over-read or possibly overwrite the heap via a maliciously crafted DSDIFF file...

FreeBSD : libraw -- multiple DoS vulnerabilities (6f0b0cbf-1274-11e8-8b5b-4ccc6adda413)

Secunia Research reports : CVE-2018-5800: An off-by-one error within the 'LibRaw::kodakycbcrloadraw' function internal/dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. CVE-2017-5801: An error within the 'LibRaw::unpack' function...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-166)

This update for GraphicsMagick fixes the following issues : - The dcm coder was updated to newest code, covering all currently known security issues. Security issues fixed : - CVE-2017-17502: ReadCMYKImage in ImportCMYKQuantumType had a heap-based buffer over-read via a crafted file. boo1073081 -...

Updated freetype2 packages fix security vulnerability

Updated freetype2 packages fix security vulnerability: FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the ttsizereset function in truetype/ttobjs.c CVE-2017-7864...

CVE-2017-17723

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file...