17 matches found
EUVD-2016-10077
Malware in sbrugna...
CVE-2024-56431
ochufftreeunpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash...
Theora 安全漏洞
Theora is a reference implementation of the Theora video compression format open-sourced by Xiph. A security vulnerability exists in Theora that stems from an invalid left shift in the ochufftreeunpack function in the huffdec.c file...
Code injection
listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...
CVE-2016-9266
listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift...
CVE-2016-9266
CVE-2016-9266 affects libming 0.4.7, where listmp3.c allows a remote attacker to cause an invalid left shift via a crafted MP3 file. The vulnerability is described as having an unspecified impact in the initial report, but multiple connected sources document a fix in libming 0.4.8. Fedora advisor...
CVE-2015-8932
The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...
CVE-2015-8932
The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...
DEBIAN-CVE-2015-8932
The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...
Design/Logic Flaw
The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...
CVE-2015-8932
The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...
CVE-2015-8932
The CVE-2015-8932 issue affects the libarchive library, specifically the compress_bidder_init function in archive_read_support_filter_compress.c, before version 3.2.0. A crafted tar file can trigger an invalid left shift, allowing a remote attacker to cause a denial of service (crash). Public ref...
CVE-2015-8932
The compressbidderinit function in archivereadsupportfiltercompress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted tar file, which triggers an invalid left shift...
libarchive: Undefined behavior / invalid shiftleft in TAR parser
Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...
libarchive: Undefined behavior / invalid shiftleft in TAR parser
Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...
CVE-2015-8932
Undefined behavior invalid left shift was discovered in libarchive, in how Compress streams are identified. This could cause certain files to be mistakenly identified as Compress archives and fail to read...
libarchive TAR Parser Unauthorized Operation Vulnerability
libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's TAR parser. An attacker can exploit this vulnerability to perform an undefined operation, resulting in an invalid left shift...