CVE-2016-10191

Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches...

CVE-2016-10191

Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches...

CVE-2016-10192

CVE-2016-10192 : FFmpeg heap-based buffer overflow in ffserver.c due to failure to check chunk size. Affected versions: FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2. Result: remote code execution as described; attack vector is network-based. Remediation: up...

CVE-2016-10192

Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size...

CVE-2017-5931

Integer overflow in hw/virtio/virtio-crypto.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service QEMU process crash or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow...

Integer overflow

Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service application crash via a crafted 8BIM chunk, which triggers a heap-based buffer overflow...

CVE-2016-7800

Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service application crash via a crafted 8BIM chunk, which triggers a heap-based buffer overflow...

CVE-2016-7800

Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service application crash via a crafted 8BIM chunk, which triggers a heap-based buffer overflow...

CVE-2016-7800

Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service application crash via a crafted 8BIM chunk, which triggers a heap-based buffer overflow...

CVE-2016-7800

GraphicsMagick 1.3.25 and earlier are affected by CVE-2016-7800 due to an integer underflow in the parse8BIM function (coders/meta.c), which can be triggered by a crafted 8BIM chunk to cause a heap-based buffer overflow and a denial of service (application crash). Several connected advisories con...

CVE-2016-7800

Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service application crash via a crafted 8BIM chunk, which triggers a heap-based buffer overflow...

Ubuntu 16.10 : linux vulnerabilities (USN-3190-1)

Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon mcryptd in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service system crash. CVE-2016-10147 It was discovered that a...

CVE-2016-4796

Heap-based buffer overflow in the colorcmyktorgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service crash via a crafted .j2k file...

USN-3190-1: Linux kernel vulnerabilities

Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon mcryptd in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service system crash. CVE-2016-10147 It was discovered that a...

Denial Of Service (DoS) Through Heap-based Buffer Overflow

libplist is vulnerable to denial of service DoS attacks. The vulnerability exists as it is possible for an out-of-bounds read in parsearraynode, causing a heap-based buffer overflow that leads to DoS...

VMware Workstation Multiple Code Execution Vulnerabilities (Feb 2017) - Windows

VMware Workstation is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Arbitrary Code Execution

LibYAML is susceptible to arbitrary code execution attacks. A heap-based buffer overflow occurs due to not properly parsing URL in a YAML, allowing the attackers to trigger an arbitrary code execution attack using a long sequence of percent-encoded characters in a URL in a YAML file...

Integer overflow

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

CVE-2016-10164

Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via 1 the number of extensions or 2 their concatenated length in a crafted XPM...

CVE-2016-10164

Summary: CVE-2016-10164 is a heap-based overflow in libXpm when parsing XPM extensions on 64-bit platforms, potentially enabling DoS or arbitrary code execution. The flaw arises from multiple integer overflows in the extensions parsing path, leading to out-of-bounds writes in the heap. Affected c...