3178 matches found
CVE-2018-11436
CVE-2018-11436 affects Libmobi version 0.3. The vulnerability is in the buffer_addraw function of buffer.c, enabling a remote attacker to disclose information via a crafted MOBI file due to a heap-based over-read. The exploitation vector and impact are described as information disclosure; no in-w...
CVE-2018-11433
The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11433
CVE-2018-11433 affects Libmobi 0.3. The vulnerability lies in mobi_get_kf8boundary_seqnumber (util.c), which can disclose memory via a crafted MOBI file due to a heap-based buffer over-read. Remote attackers could exploit this by using a specially crafted MOBI, enabling information disclosure. Th...
CVE-2018-11432
The connected documents confirm a vulnerability in Libmobi version 0.3 affecting the mobi_parse_mobiheader function in read.c, where a crafted MOBI file can cause information disclosure via a heap-based buffer over-read. This is a remote-triggered flaw with potential partial confidentiality impac...
CVE-2018-11439
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...
CVE-2018-11432
The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11433
The mobigetkf8boundaryseqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11434
The bufferfill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
CVE-2018-11439
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...
CVE-2018-11432: Out-of-bounds Read
The mobiparsemobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...
PT-2018-10566
Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure due to a heap-based buffer over-read via a crafted mobi file. This is related to the mobi get kf8boundary seqnumber function in util.c...
PT-2018-3626
Name of the Vulnerable Software and Affected Versions TagLib version 1.11.1 Description The issue is related to a heap-based buffer over-read in the TagLib::Ogg::FLAC::File::scan function, which can be exploited by remote attackers using a crafted audio file, potentially leading to information...
PT-2018-10567
Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure through a heap-based buffer over-read via a crafted mobi file. This is due to a problem in the buffer fill64 function in compression.c...
PT-2018-10569
Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause information disclosure via a crafted mobi file, which leads to a heap-based buffer over-read in the buffer addraw function. Recommendations For Libmobi version 0.3, at...
Heap overflow
md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...
CVE-2018-11547
mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...
CVE-2018-11546
md4c 0.2.5 has a heap-based buffer over-read because mdisnamedentitycontents has an off-by-one error...
CVE-2018-11547
mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...