3178 matches found
EulerOS 2.0 SP1 : rsync (EulerOS-SA-2017-1332)
According to the version of the rsync package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allow...
EulerOS 2.0 SP2 : rsync (EulerOS-SA-2017-1333)
According to the version of the rsync package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allow...
PT-2017-3877
Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.27a Description The issue is related to a heap-based buffer over-read in the ReadOneJNGImage function in coders/png.c, specifically concerning the oFFs chunk allocation. This can potentially allow a remote attacker t...
CVE-2017-17669
There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunkint.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack...
CVE-2017-17669
There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunkint.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack...
CVE-2017-17669: Out-of-bounds Read
There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunkint.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack...
PT-2017-19377
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer over-read issue exists in the Exiv2::Internal::PngChunk::keyTXTChunk function, located in pngchunk int.cpp. This can be triggered by a crafted PNG file, potentially leading to a remote denial ...
Heap overflow
ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...
Heap overflow
ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...
CVE-2017-17500
ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...
CVE-2017-17504
ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...
CVE-2017-17503
ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file...
CVE-2017-17504
CVE-2017-17504 affects ImageMagick prior to 7.0.7-12. The vulnerability is a heap-based buffer over-read in the PNG coder (png.c: Magick_png_read_raw_profile), triggered by a crafted file, related to ReadOneMNGImage. Exploitation could allow memory access beyond bounds when processing a malicious...
CVE-2017-17500
ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...
CVE-2017-17503
ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file...
CVE-2017-17504
ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...
CVE-2017-17503
ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file...
CVE-2017-17500
ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...
