3178 matches found
CVE-2017-17812
In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read in the function detoken in asm/preproc.c that will cause a remote denial of service attack...
CVE-2017-17912: Out-of-bounds Read
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region...
CVE-2017-17915: Out-of-bounds Read
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
CVE-2017-17915
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...
CVE-2017-17912
CVE-2017-17912 affects GraphicsMagick (TIFF reader). The issue is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, where LocaleNCompare reads data beyond the allocated region, exposing potential denial of service or information disclosure as noted in multiple advisories. Connect...
CVE-2017-17915
CVE-2017-17915 affects GraphicsMagick (notably the GraphicsMagick 1.4 snapshot-20171217 Q8) where a heap-based buffer over-read occurs in ReadMNGImage (coders/png.c) due to accessing one byte before testing a limit. This aligns with multiple advisories noting GraphicsMagick vulnerabilities and CV...
CVE-2017-17912
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region...
PT-2017-15096
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.4 snapshot-20171217 Q8 Description The issue is related to a heap-based buffer over-read in the ReadNewsProfile function, located in coders/tiff.c. This occurs because LocaleNCompare reads data from the heap beyond the...
CVE-2017-17879
In ImageMagick 7.0.7-16 Q16 x8664 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error...
PT-2017-15066
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-16 Q16 x86 64 Description The issue is related to a heap-based buffer over-read in the ReadOneMNGImage function, specifically in the coders/png.c file. This is caused by an off-by-one error related to length...
PT-2017-3880
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.4 snapshot-20171217 Q8 Description The issue is related to a heap-based buffer over-read in the ReadMNGImage function, located in coders/png.c. This error can be exploited by a remote attacker to execute arbitrary code...
Updated rsync package fixes security vulnerability
The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact by sendi...
CVE-2017-17818
In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...
CVE-2017-17818
In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...
CVE-2017-17812
The CVE-2017-17812 issue affects Netwide Assembler (NASM) 2.14rc0 and is a heap-based buffer over-read in detoken() within asm/preproc.c that can enable remote denial of service. Connected sources confirm this specific vulnerability class and the affected component, with remediation in newer NASM...
CVE-2017-17818
NASM 2.14rc0 is affected by CVE-2017-17818 (heap-based buffer over-read in paste_tokens, asm/preproc.c) that can enable a remote denial of service. The issue concerns the paste_tokens path in preproc.c and is documented across multiple advisories (e.g., Red Hat Nessus entries). Remediation is to ...
CVE-2017-17818
In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...
CVE-2017-17812: Out-of-bounds Read
In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read in the function detoken in asm/preproc.c that will cause a remote denial of service attack...