10990 matches found
CVE-2018-11806
mcat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams...
Microsoft wimgapi LoadIntegrityInfo Code Execution Vulnerability
Summary An exploitable heap corruption exists in the LoadIntegrityInfo function of wimgapi version 10.0.16299.15 WinBuild.160101.0800. A crafted WIM image can lead to a heap corruption, resulting in direct code execution. Tested Versions WIMGAPI 10.0.16299.15 WinBuild.160101.0800 Product URLs...
Amazon Linux 2 : curl (ALAS-2018-1029)
Curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command...
Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable from the same local network segment OSI Layer 2 Vendor: Siemens Equipment: SCALANCE X switches, RUGGEDCOM Win, RFID 181-EIP, and SIMATIC RF182C Vulnerability: Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a...
CVE-2018-12109
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...
CVE-2018-12109
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...
CVE-2018-12109
An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...
Security update for curl (moderate)
This update for curl to version 7.60.0 fixes the following issues: These security issues were fixed: - CVE-2018-1000300: Prevent heap-based buffer overflow when closing down an FTP connection with very long server command replies bsc1092094. - CVE-2018-1000301: Prevent buffer over-read that could...
[ASA-201806-5] firefox: arbitrary code execution
Arch Linux Security Advisory ASA-201806-5 ========================================= Severity: High Date : 2018-06-08 CVE-ID : CVE-2018-6126 Package : firefox Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-715 Summary ======= The package firefox before versi...
Qemu Slirp Networking Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Qemu. An attacker must first obtain the ability to execute code on the guest OS in order to exploit this vulnerability. The specific flaw exists within the handling of the slirp networking. The issu...
Important: curl
Issue Overview: Curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command...
CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
Heap overflow
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
CVE-2018-11438
CVE-2018-11438 affects Libmobi 0.3. The vulnerability resides in mobi_decompress_lz77 (compression.c) and allows remote code execution via a crafted MOBI file, caused by a heap-based buffer overflow. Confirmed affected component is Libmobi 0.3; the issue is exploitable over the network through cr...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
CVE-2018-11438
The mobidecompresslz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution heap-based buffer overflow via a crafted mobi file...
SUSE-SU-2018:1471-1 Security update for libmikmod
This update for libmikmod fixes the following issues: - CVE-2010-2546: Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to...