19942 matches found
CVE-2023-40745
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
CVE-2023-41175
CVE-2023-41175 affects libtiff: multiple potential integer overflows in raw2tiff.c can cause a heap-based buffer overflow, enabling remote denial of service or potentially arbitrary code execution when processing crafted TIFF images. Public advisories reference libtiff
CVE-2023-41175
A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
CVE-2023-40745 Libtiff: integer overflow in tiffcp.c
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
Heap-based Buffer Overflow in vim/vim
...
Ubuntu: Security Advisory (USN-6410-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: vim
Issue Overview: vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service DoS via the exbufferall method. CVE-2021-3236 Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 Integer Overflow or Wraparound in GitHub repository...
Vim < 9.0.1969 Buffer Overflow DoS
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid182588;...
Amazon Linux 2 : vim (ALAS-2023-2266)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2266 advisory. vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service DoS via the exbufferall method. CVE-2021-3236 Use After Free in GitHub repository vim/vim...
CVE-2023-3428
CVE-2023-3428 is a heap-based buffer overflow vulnerability in ImageMagick's coders/tiff.c. A local attacker could trick a user into opening a crafted TIFF file, resulting in an application crash and denial of service. Public advisories (e.g., Debian DSA-5628-1 and ALAS/Cloud Foundry notices) ind...
USN-6410-1: GRUB2 vulnerabilities
It was discovered that a specially crafted file system image could cause a heap-based out-of-bounds write. A local attacker could potentially use this to perform arbitrary code execution bypass and bypass secure boot protections. CVE-2023-4692 It was discovered that a specially crafted file syste...
(0Day) MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of MuseScore. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CAP files...
Ubuntu 16.04 ESM / 18.04 ESM : GNU binutils vulnerabilities (USN-6413-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6413-1 advisory. It was discovered that GNU binutils was not properly performing checks when dealing with memory allocation operations, which could lead to...
SUSE SLES12 Security Update : vim (SUSE-SU-2023:3942-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3942-1 advisory. Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflistaltfpos bsc1215004. - CVE-2023-4734: Fixed segmentation...
Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-364)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-364 advisory. LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that...
Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-360)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-360 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. CVE-2023-4734 Out-of-bounds Write in...
CVE-2023-44488
A heap-based buffer overflow flaw was found in libvpx, a library used to process VP9 video codecs data. This issue occurs when processing certain specially formatted video data via a crafted HTML page, allowing an attacker to crash or remotely execute arbitrary code in an application, such as a w...
ALPINE-CVE-2023-5344
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...
