CVE-2018-18583

Summary: CVE-2018-18583 affects LuPng (miniz/lupng.c). A heap-based buffer overflow occurs in the function insertByte during a write operation for data sourced from a swap, reported for LuPng up to 2017-03-10. Related records (CNVD-2019-09764) describe that this vulnerability can be exploited to ...

SUSE SLES12 Security Update : icu (SUSE-SU-2018:1401-2)

icu was updated to fix two security issues. These security issues were fixed : CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU used an integer data type that is...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:2973-2) (Spectre)

This update for qemu fixes the following security issues : CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket causing DoS bsc1098735...

Updated libtiff packages fix security vulnerabilities

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file CVE-2016-5319. In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c CVE-2017-17942. TIFFWriteScanlin...

MGASA-2018-0409 Updated libtiff packages fix security vulnerabilities

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file CVE-2016-5319. In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c CVE-2017-17942. TIFFWriteScanlin...

Heap overflow

A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc...

CVE-2018-18274

pdfalto 0.2 contains a heap-based buffer overflow in TextPage::addAttributsNode within XmlAltoOutputDev.cc. This vulnerability is documented across multiple sources (CNVD, OSV, NVD, CVE listing) with consistent description, affecting pdfalto 0.2 and enabling potential arbitrary code execution or ...

Remote Code Execution (RCE)

libtiff.so is vulnerable to remote code execution. A heap-based buffer overflow occurs in the functions gtTielSeparate and gtStripSeparate in tiffgetimage.c due to improper handling of the tile size in a TIFF file, allowing remote attackers to execute arbitrary code via a specially crafted TIFF...

CVE-2018-17942

The converttodecimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing...

CVE-2018-17942

CVE-2018-17942 affects Gnulib’s convert_to_decimal (vasnprintf.c): a heap-based buffer overflow caused by not allocating space for the trailing null during %f processing. It impacts Gnulib prior to 2018-09-23; OSV and related advisories note a security update/fix. The CVSSv3 vector is CVSS:3.0/AV...

CVE-2018-17942

The converttodecimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing...

Adobe Acrobat Pro DC EMF BMP Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:2973-1) (Spectre)

This update for qemu fixes the following security issues : CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket causing DoS bsc1098735...

CVE-2017-7908

A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls...

GE Communicator

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: Communicator Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Exploitation could allow attackers to execute arbitrary code or create a denial-of-service condition. 3...

CVE-2018-3998

An exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause an undersized allocation, resulting in an overflow when the application tries to copy...

CVE-2018-3998

CVE-2018-3998 (Atlantis Word Processor) describes a heap-based buffer overflow in the Windows Enhanced Metafile parser for Atlantis Word Processor v3.2.5.0. A crafted image embedded in a document can cause an undersized allocation, leading to heap corruption when data is copied. The vulnerability...

Atlantis Word Processor Word Document Complex Piece Descriptor Table Fc.Compressed Code Execution Vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor. A specially crafted document can cause Atlantis to write a value outside the bounds of a heap allocation, resulting in a buffer overflow. An attacker must convince a victim ...

Atlantis Word Processor document endnote reference code execution vulnerability

Summary An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis word processor. A specially crafted document can prevent Atlas from adding elements to an array that is indexed by a loop. When reading from this array, the application will use an out-of-bound...

Heap overflow

The function t2pwritepdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935...