3178 matches found
CVE-2017-18212: Out-of-bounds Read
An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function in lit/lit-char-helpers.c via a RegExp"\x0"; payload...
Updated TiMidity++ packages fix security vulnerabilities
The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option CVE-2017-11546. The resamplegauss function in...
Heap overflow
printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...
CVE-2017-18198
printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...
CVE-2017-18198
printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...
CVE-2017-18198
printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...
CVE-2017-18198: Out-of-bounds Read
printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...
Heap overflow
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...
CVE-2018-7437
CVE-2018-7437 affects FreeXL (library used to read Excel files). The issue is a heap-based buffer over-read in a memcpy call within parse_SST, fixed in FreeXL versions 1.0.5 and later. Impact is potential memory safety violation; exploitation details are not provided in the available documents. R...
CVE-2018-7435
FreeXL (lib freexl) — CVE-2018-7435: heap-based buffer over-read in freexl::destroy_cell in versions before 1.0.5. Impact noted as potential denial of service; advisories (Debian, Gentoo, Red Hat/openSUSE/NASL) recommend upgrading to 1.0.5 or later. No exploitation details provided in the supplie...
CVE-2018-7436
CVE-2018-7436 affects FreeXL prior to 1.0.5 and is caused by a heap-based buffer over-read in the parse_SST function. Impact details in sources indicate vulnerability could lead to partial confidentiality/integrity/availability concerns; CVSS data from NVD shows base scores of 6.8 (2.0) and 8.8 (...
CVE-2018-7439
The CVE-2018-7439 issue affects FreeXL up to version 1.0.4; it is a heap-based buffer over-read in read_mini_biff_next_record. Exploitation could impact confidentiality, integrity, and availability (CVSS3: High). Mitigation: upgrade to FreeXL 1.0.5 or later (per the description). If you need furt...
PT-2018-18071
Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in a memcpy call of the parse SST function. This issue affects versions prior to 1.0.5. Recommendations For versio...
PT-2018-18070
Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in a pointer dereference of the parse SST function. This issue affects versions prior to 1.0.5. Recommendations Fo...
PT-2018-18072
Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in the parse unicode string function. This issue affects versions prior to 1.0.5. Recommendations For versions pri...
PT-2018-18073
Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5 Description An issue was discovered in FreeXL, where there is a heap-based buffer over-read in the read mini biff next record function. This issue affects versions prior to 1.0.5. Recommendations For versions pri...
CVE-2018-7437: Out-of-bounds Read
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a memcpy call of the parseSST function...
CVE-2018-7436: Out-of-bounds Read
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parseSST function...