594 matches found
CVE-2017-11720
There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file...
Input validation
In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, tdimagelength is not checked. The value of tdimagelength can be directly controlled by an input file. In the...
Arbitrary File Read
dompdf is vulnerable to arbitrary file read. A malicious user can bypass chroot protections with the PHP protocols and wrappers through the inputfile parameters...
PT-2017-18759 · Autotrace +1 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read and SEGV. This is related to the ReadImage function in input-bmp.c. Recommendations: For AutoTrace version...
PT-2017-18738 · Autotrace +1 · Autotrace +1
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to the pnm load ascii function in input-pnm.c, which allows remote attackers to cause a denial of service, resulting in an invalid write and SEGV. Recommendations: For AutoTrace versi...
LibSass: heap-buffer-overflow (read outside of buffer) in Sass::Prelexer::exactly<(char)92>(char const*) - libsass/src/lexer.hpp:92
Built with afl-clang-fast from git source 5909ba5. Feeding a file that contains nothing but '\ to sassc triggers this flaw. ==22006==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200000ef93 at pc 0x000000907c6a bp 0x7fff656d9430 sp 0x7fff656d9428 READ of size 1 at 0x60200000ef93...
CVE-2016-8032
Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file...
CVE-2016-8032
Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file...
CVE-2016-8032
Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local attackers to bypass local security protection via a crafted input file...
CVE-2016-8031
Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local users to bypass local security protection via a crafted input file...
CVE-2016-8031
Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local users to bypass local security protection via a crafted input file...
CVE-2016-8031
The CVE-2016-8031 entry concerns Intel Security Anti-Virus Engine (AVE) versions 5200 through 5800. The vulnerability is a local bypass of security protections, exploitable by a crafted input file, allowing a local attacker to bypass local security controls. The available connected documents conf...
CVE-2016-8031
Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine AVE 5200 through 5800 allows local users to bypass local security protection via a crafted input file...
GNU GTypist 2.9.5-2 - Local buffer overflow vulnerability
Author: k0Sh1 Vulnerability analysis GNU GTypist is a Linux text editing software, more awkward is in my debugging process, we found gtypist actually open the CNARAY and NX, that is, in accordance with the PoC given in the Exploit should be unable to take advantage of, this should be a denial of...
vorbis-tools infinite loop vulnerability
Vorbis-tools is used to manipulate and create Vorbis files.OGG Vorbis is a new audio compression format, similar to existing music formats such as MP3. vorbis-tools infinite loop vulnerability. The designer did not set up a numeric legitimacy check, which led to an overflow in the fseek function ...
[SECURITY] [DLA 655-1] mpg123 security update
Several security vulnerabilities have been discovered in mpg123, an MPEG layer 1/2/3 audio decoder and player. An attacker could take advantage of these flaws to cause a denial of service against mpg123 or applications using the libmpg123 library with a carefully crafted input file. CVE-2014-9497...
xdelta3 Buffer Overflow Vulnerability
xdelta is a suite of command-line programs developed by software developer Joshua MacDonald for working with incremental encoding not complete storage or transmission of data. xdelta3 is an enhanced version of xdelta. A buffer overflow vulnerability in xdelta3 versions prior to 3.0.9 allows remot...
CVE-2014-9765
Buffer overflow in the maingetappheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file...
