CVE-2017-9172

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29...

CVE-2017-9167

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25...

Heap overflow

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25...

CVE-2017-9168

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25...

CVE-2017-9192

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7...

CVE-2017-9151

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadascii function in input-pnm.c:303:12...

CVE-2017-9172

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29...

Heap overflow

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29...

CVE-2017-9153

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadrawpbm function in input-pnm.c:391:13...

CVE-2017-9166

CVE-2017-9166 affects AutoTrace 0.31.1 via the libautotrace.a library. The vulnerability is a heap-based buffer over-read in the GET_COLOR function (color.c:18:11). Exploitation could allow partial confidentiality/integrity/availability impact as reflected in the CVSS metrics (base score 7.5 on C...

CVE-2017-9170

CVE-2017-9170 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in ReadImage (input-bmp.c:370:25). This vulnerability is documented across multiple sources (NVD, Red Hat advisories, CNVD) with the same description; some sources describe potential arbitrary code execut...

CVE-2017-9191

CVE-2017-9191 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in rle_fread (input-tga.c:252:15). Multiple sources (CNVD, Red Hat, SUSE, NVD) describe potential arbitrary code execution or denial of service via crafted bitmap (TGA) files. Public exploit status isn’t ...

CVE-2017-9153

CVE-2017-9153 affects AutoTrace 0.31.1 (libautotrace.a) with a heap-based buffer overflow in pnm_load_rawpbm (input-pnm.c:391:13). This can be triggered by a crafted bitmap image, potentially enabling remote code execution or DoS. Remediation in public advisories recommends upgrading to a newer A...

CVE-2017-9170

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25...

CVE-2017-9168

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25...

CVE-2017-9146

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impa...

CVE-2017-9146

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impa...

CVE-2017-9146

The CVE-2017-9146 entry concerns the libytnef component (ytnef, libytnef) where TNEFFillMapi in lib/ytnef.c may allocate with a zero/nonzero count check, enabling a heap-based buffer overflow via a crafted tnef file. Affected up to ytnef 1.9.2; remote attackers could crash the application or caus...

CVE-2017-9146

The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory allocation, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impa...

Heap-Based Buffer Overflow In Libxml2

nokogiri gem is using libxml2 which is vulnerable to CVE-2016-1834. The vulnerability exists when xmlStrlen returns a negative length in the xmlStrncat function. Therefore, it may lead to other attacks such as denial of service or arbitrary code execution through a heap-based buffer overflow usin...