EulerOS 2.0 SP1 : libvncserver (EulerOS-SA-2017-1046)

According to the versions of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service...

EulerOS 2.0 SP2 : gstreamer-plugins-bad-free (EulerOS-SA-2017-1009)

According to the versions of the gstreamer-plugins-bad-free package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format...

Heap overflow

The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

Heap overflow

The readbuf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted archive...

CVE-2017-8364

The readbuf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted archive...

CVE-2017-8366

The strescape function in ecstrings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted filter that is mishandled by etterfilter...

CVE-2017-8364

The readbuf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted archive...

CVE-2017-8364

The readbuf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted archive...

CVE-2017-8366

The strescape function in ecstrings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted filter that is mishandled by etterfilter...

CVE-2017-8358

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...

CVE-2017-8358

CVE-2017-8358 is an out-of-bounds write caused by a heap-based buffer overflow in LibreOffice’s ReadJPEG path (vcl/source/filter/jpeg/jpegc.cxx). Connected sources confirm affected product: LibreOffice; root cause: heap-based overflow in ReadJPEG; impact as stated: out-of-bounds write with potent...

CVE-2017-8358

LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/source/filter/jpeg/jpegc.cxx...

libmad -- multiple vulnerabilities

National Vulnerability Database: CVE-2017-8372: The madlayerIII function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted audio file. CVE-2017-8373: The madlayerIII function ...

CVE-2017-8325

The iwprocesscolstointermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted image...

Heap Based Buffer Overflow

FreeType is vulnerable to out-of-bounds write issues. These writes are caused by a heap-based buffer overflow in the t1builderclosecontour function in psaux/psobjs.c. If a malformed font is supplied, it is possible that the contour variable is started but no points added, causing the buffer...

CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

CVE-2017-8287

CVE-2017-8287 affects FreeType 2 up to 2.7.1, with an out-of-bounds write caused by a heap-based buffer overflow in psaux/psobjs.c:t1_builder_close_contour. This can enable remote code execution via malformed fonts. Advisories (e.g., Arch Linux ASA-201705-7/-10 and distro advisories) recommend up...

CVE-2017-6037

CVE-2017-6037 affects Wecon Technologies LEVI Studio HMI Editor (pre-1.8.1). A heap-based buffer overflow occurs when running a maliciously crafted project file, with CVSS v3 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Related CNVD/NVD entries corroborate a similar vulnerability; ICS-CE...