PT-2018-6556

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a heap-based buffer over-read in the Exiv2::IptcData::printStructure function, specifically in the "!= 0x1c" case. This can be exploited by remote attackers to cause a denial of service...

PT-2018-19180

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function. This can be exploited by remote attackers using a crafted TIFF file, potentially leading to memory data disclosure or...

PT-2018-6555

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function, which can be exploited by remote attackers using a crafted TIFF file. This can lead to the disclosure of memory dat...

PT-2018-6557

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is caused by an integer overflow in the Exiv2::getULong function, leading to a heap-based buffer over-read. This can be exploited by remote attackers to cause a denial of service using a crafted image...

SUSE SLED12 / SLES12 Security Update : freetype2 (SUSE-SU-2018:0414-1)

This update for freetype2 fixes the following security issues : - CVE-2016-10244: Make sure that the parsecharstrings function in type1/t1load.c does ensure that a font contains a glyph name to prevent a DoS through a heap-based buffer over-read or possibly have unspecified other impact via a...

CVE-2017-17725: Integer Overflow or Wraparound

In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864,...

openSUSE Security Update : ImageMagick (openSUSE-2018-145)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-18027: Prevent memory leak vulnerability in the function ReadMATImage which allowed remote attackers to cause a denial of service via a crafted file bsc1076051 - CVE-2017-18029: Prevent memory leak in...

Heap overflow

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

CVE-2018-6612

An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...

CVE-2018-6612

CVE-2018-6612 affects jhead, issue arising from an integer underflow in process_EXIF in exif.c that causes a heap-based buffer over-read when parsing JPEGs. Reports across multiple advisories indicate impact on jhead 3.00 and that updates exist (e.g., jhead updated to 3.06.x in several distributi...

PT-2018-17670

Name of the Vulnerable Software and Affected Versions jhead version 3.00 Description The issue is caused by an integer underflow bug in the process EXIF function of the exif.c file, which leads to a heap-based buffer over-read when processing a malicious JPEG file. This may allow a remote attacke...

Heap overflow

The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...

CVE-2018-6406

Removed by vendor...

CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking...

SUSE SLED12 / SLES12 Security Update : rsync (SUSE-SU-2018:0118-1)

This update for rsync fixes several issues. These security issues were fixed : - CVE-2017-17434: The daemon in rsync did not check for fnamecmp filenames in the daemonfilterlist data structure in the recvfiles function in receiver.c and also did not apply the sanitizepaths protection mechanism to...

CVE-2018-5698

libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string...

CVE-2018-5698

CVE-2018-5698 affects WizardMac ReadStat 0.1.1 via the libreadstat.a component, described as a heap-based buffer over-read caused by an unterminated string. This vulnerability is repeated across NVD, CNVD, OSV, and related references, with no remediation details or patched versions provided in th...