69 matches found
OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
UBUNTU-CVE-2019-9959
The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo...
The vulnerability of the “process_bitmap_updates” function implementation in the RDP client rdesktop software arises from integer overflow, which leads to writing beyond the boundaries of the function. This allows attackers to execute arbitrary code.
The vulnerability of the “processbitmapupdates” function in the RDP client rdesktop implementation is related to integer overflow, which leads to writing beyond the bounds of the function’s capacity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
AZL-7167 CVE-2019-9210 affecting package advancecomp for versions less than 2.1-14
In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. There is also a heap-based buffer over-read...
The vulnerability of the alarm_timer_nsleep function (kernel/time/alarmtimer.c) in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the alarmtimernsleep function kernel/time/alarmtimer.c in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Integer overflow
Integer overflow in the jsregcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service application crash via a crafted regular expression...
Debian DSA-2865-1 : postgresql-9.1 - several vulnerabilities
Various vulnerabilities were discovered in PostgreSQL : - CVE-2014-0060 Shore up GRANT ... WITH ADMIN OPTION restrictions Noah Misch Granting a role without ADMIN OPTION is supposed to prevent the grantee from adding or removing members from the granted role, but this restriction was easily...
freetype: integer overflow vulnerability in smooth/ftgrays.c
Integer overflow in the grayrenderspan function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...
