CVE-2017-6800

CVE-2017-6800 affects ytnef with libytnef up to version 1.9.1, where handling of LONG data types may trigger a heap-based buffer over-read in MAPIPrint() inside libytnef. Multiple advisories (Mageia MGASA-2017-0174, Ubuntu USN-4615-1, Fedora FEDORA-2019-7d7083b8be, OSV entries) document the same ...

CVE-2017-6800

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

CVE-2017-6800

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

CVE-2017-6802: Out-of-bounds Read

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

CVE-2017-6802

An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF in libytnef...

CVE-2017-6800: Out-of-bounds Read

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

PT-2017-17334

Name of the Vulnerable Software and Affected Versions ytnef versions prior to 1.9.2 Description A potential heap-based buffer over-read issue has been discovered in the handling of incoming Compressed RTF Streams. This issue is related to the DecompressRTF function in libytnef. Recommendations Fo...

CVE-2017-6500

An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read...

CVE-2016-10244

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...

CVE-2016-10244

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...

CVE-2016-10244

CVE-2016-10244 affects FreeType 2 up to version 2.6.x (before 2.7). The vulnerability is in parse_charstrings (type1/t1load.c) where a font may lack a glyph name, enabling a crafted font to cause a heap-based buffer over-read and remote denial of service. Connected advisories confirm fixes in dow...

CVE-2016-10244

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...

CVE-2016-10244

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...

CVE-2017-6500

An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read...

CVE-2017-6500

An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read...

CVE-2016-10244: Out-of-bounds Read

The parsecharstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted file...

CVE-2017-6500: Out-of-bounds Read

An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read...

PT-2017-1730

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.7 Description The issue is related to the parse charstrings function in type1/t1load.c, which does not ensure that a font contains a glyph name. This allows remote attackers to cause a denial of service heap-based...

PT-2017-17113

Name of the Vulnerable Software and Affected Versions ImageMagick version 6.9.7 Description A specially crafted sun file can trigger a heap-based buffer over-read. Recommendations For ImageMagick version 6.9.7, at the moment, there is no information about a newer version that contains a fix for...