Lucene search
+L

3178 matches found

Cvelist
Cvelist
•added 2017/06/07 4:50 a.m.•42 views

CVE-2017-9474

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

5.6AI score0.00938EPSS
SaveExploits1References2
CVE
CVE
•added 2017/06/07 4:50 a.m.•81 views

CVE-2017-9472

CVE-2017-9472 affects ytnef 1.9.2, where the SwapDWord function in lib/ytnef.c allows a remote attacker to cause a denial of service through a crafted winmail.dat-like file, via a heap-based buffer over-read that crashes the application. Fedora and related advisories note a subsequent update to 1...

5.5CVSS5.5AI score0.00936EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2017/06/07 4:50 a.m.•2 views

CVE-2017-9474

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

6.8CVSS0.00938EPSS
SaveExploits1References2
CVE
CVE
•added 2017/06/07 4:50 a.m.•84 views

CVE-2017-9471

The CVE-2017-9471 issue affects ytnef 1.9.2 where the SwapWord function in lib/ytnef.c can be exploited by a crafted file to trigger a heap-based buffer over-read, leading to application crash (DoS). Descriptions across connected sources confirm the vulnerability in libytnef and its impact as a d...

5.5CVSS6.8AI score0.01174EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2017/06/07 4:50 a.m.•48 views

CVE-2017-9471

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

5.5CVSS5.6AI score0.01174EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2017/06/07 4:50 a.m.•30 views

CVE-2017-9472

In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

5.5CVSS5.6AI score0.00936EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2017/06/07 4:50 a.m.•43 views

CVE-2017-9474

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

5.5CVSS5.6AI score0.00938EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2017/06/07 12:00 a.m.•3 views

PT-2017-18945

Name of the Vulnerable Software and Affected Versions ytnef version 1.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. This is due to the SwapDWord function in lib/ytnef.c...

5.5CVSS0.01191EPSS
SaveExploits4References26
UbuntuCve
UbuntuCve
•added 2017/06/07 12:00 a.m.•28 views

CVE-2017-9471

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

5.5CVSS6.6AI score0.01174EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/07 12:00 a.m.•5 views

CVE-2017-9474: Out-of-bounds Read

In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

5.5CVSS6.7AI score0.00938EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/07 12:00 a.m.•6 views

CVE-2017-9472: Out-of-bounds Read

In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

5.5CVSS6.7AI score0.00936EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/07 12:00 a.m.•3 views

CVE-2017-9471: Out-of-bounds Read

In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

5.5CVSS6.7AI score0.01174EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2017/06/05 9:21 a.m.•35 views

CVE-2017-8363

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

6.5CVSS4.8AI score0.03332EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/05/30 10:20 a.m.•39 views

CVE-2017-9117

In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff...

9.8CVSS8.9AI score0.02221EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2017/05/23 11:53 a.m.•34 views

CVE-2017-9152

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnmloadraw function in input-pnm.c:346:41...

9.8CVSS6.6AI score0.02262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/05/23 11:51 a.m.•27 views

CVE-2017-9195

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27...

9.8CVSS7.1AI score0.02262EPSS
SaveExploits0References1
NVD
NVD
•added 2017/05/23 4:29 a.m.•27 views

CVE-2017-9207

The iwgetui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image, related to imagew-jpeg.c...

6.5CVSS6.4AI score0.01584EPSS
SaveExploits0References2
NVD
NVD
•added 2017/05/23 4:29 a.m.•33 views

CVE-2017-9194

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29...

9.8CVSS9.6AI score0.01928EPSS
SaveExploits0References1
OSV
OSV
•added 2017/05/23 4:29 a.m.•19 views

CVE-2017-9206

The iwgetui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image, related to imagew-jpeg.c...

6.5CVSS7AI score
SaveExploits0References2
NVD
NVD
•added 2017/05/23 4:29 a.m.•29 views

CVE-2017-9166

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:18:11...

9.8CVSS9.6AI score0.01928EPSS
SaveExploits0References1
Rows per page
Query Builder