Debian DLA-918-1 : freetype security update

It was found that an out of bounds write caused by a heap-based buffer overflow could be triggered in freetype via a crafted font. This update also reverts the fix for CVE-2016-10328, as it was determined that freetype 2.4.9 is not affected by that issue. For Debian 7 'Wheezy', these problems hav...

Out-of-Bounds Write

freetype is vulnerable to an out-of-bounds write. A malicious user can pass a cff font file to the application to cause a heap-based buffer overflow that can lead to an out-of-bounds write. This can cause the application to crash or overwrite values in the heap...

CVE-2017-8287

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1builderclosecontour function in psaux/psobjs.c...

CVE-2017-8105

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...

CVE-2017-8105

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...

CVE-2017-8105

CVE-2017-8105 affects FreeType 2 and earlier (up to 2017-03-24 release), with an out-of-bounds heap write in t1_decoder_parse_charstrings (psaux/t1decode.c). Connected sources confirm remote code execution risk and/or denial of service in several Linux distributions; impacted packages include fre...

CVE-2017-8105

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1decoderparsecharstrings function in psaux/t1decode.c...

CVE-2017-7864

FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the ttsizereset function in truetype/ttobjs.c...

CVE-2017-7857

FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TTGetMMVar function in truetype/ttgxvar.c and the sfntinitface function in sfnt/sfobjs.c...

Debian DLA-910-1 : libreoffice security update

CVE-2017-3157 Ben Hayak discovered that objects embedded in Writer and Calc documents may result in information disclosure. Please see https://www.libreoffice.org/about-us/security/advisories/cve-2017-3157 / for additional information. CVE-2017-7870 An out-of-bounds write caused by a heap-based...

Ubuntu: Security Advisory (USN-3263-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : GraphicsMagick (ALAS-2017-820)

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file.CVE-2017-6335 The WPG format reader in GraphicsMagick 1.3.2...

CVE-2016-7520

CVE-2016-7520 : ImageMagick has a heap-based overflow in coders/hdr.c that can trigger a denial of service via a crafted HDR file, due to an out-of-bounds read. The vulnerability is demonstrated in the description as a remote-exploitable issue. The connected Nessus/NVD data confirms the same tech...

CVE-2016-7525

CVE-2016-7525 is a vulnerability in ImageMagick where the heap-based buffer overflow in the PSD file handling (coders/psd.c) can be triggered by a crafted PSD file, leading to a possible denial of service via out-of-bounds read. The connected Nessus/F5 entries enumerate ImageMagick PSD-related is...

CVE-2016-4650

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-5762

Integer overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 might allow remote attackers to execute arbitrary code via a long 1 username or 2 password, which triggers a heap-based buffer overflow...

CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

Medium: GraphicsMagick

Issue Overview: The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file.CVE-2017-6335 The WPG format reader in...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2017:1044-1)

This update for tiff fixes the following issues: Security issues fixed : - CVE-2016-10272: LibTIFF 4.0.7 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted TIFF image, related to 'WRITE of size 2048' and...

Multiple AVM FRITZ!Box VoIP Remote Code Execution

Several models of the AVM FRITZ!Box are vulnerable to a heap-based buffer overflow, which allows attackers to execute arbitrary code on the device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...