CVE-2017-5505: Improper Restriction of Operations within the Bounds of a Memory Buffer

The jasmatrixasl function in jasseq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

IBM WebSphere MQ Multiple Denial of Service Vulnerabilities (Mar 2017)

IBM WebSphere MQ is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-6800

An issue was discovered in ytnef before 1.9.2. An invalid memory access heap-based buffer over-read can occur during handling of LONG data types, related to MAPIPrint in libytnef...

PT-2017-17332

Name of the Vulnerable Software and Affected Versions ytnef versions prior to 1.9.2 Description An issue has been discovered related to the handling of LONG data types, which can cause an invalid memory access, specifically a heap-based buffer over-read. This issue is associated with the MAPIPrin...

UBUNTU-CVE-2017-5836

The plistfreedata function in plist.c in libplist allows attackers to cause a denial of service crash via vectors involving an integer node that is treated as a PLISTKEY and then triggers an invalid free...

Code injection

The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

Design/Logic Flaw

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

CVE-2017-5977

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

CVE-2017-5503

The decclnpass function in libjasper/jpc/jpct1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via a crafted image...

CVE-2017-5977

The zzipmementryextrablock function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted ZIP file...

CVE-2017-5504

The jpcundoroi function in libjasper/jpc/jpcdec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted image...

CVE-2017-5503

The decclnpass function in libjasper/jpc/jpct1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via a crafted image...

CVE-2017-5503

CVE-2017-5503 affects JasPer library (JasPer 1.900.27) in the dec_clnpass path (libjasper/jpc/jpc_t1dec.c). A crafted image can trigger a denial of service via an invalid memory write, potentially with additional impact. Connected advisories confirm the same vulnerability across multiple vendor f...

PT-2017-16543

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.27 Description The issue is related to the dec clnpass function in libjasper/jpc/jpc t1dec.c, which allows remote attackers to cause a denial of service, resulting in an invalid memory write and crash, or possibly have oth...

CVE-2016-10207

The Xvnc server in TigerVNC allows remote attackers to cause a denial of service invalid memory access and crash by terminating a TLS handshake early...

tnef 'src/mapi_attr.c:mapi_attr_read()' function denial of service vulnerability

tnef is a set of programs for decompressing MIME attachments. A security vulnerability in the 'src/mapiattr.c:mapiattrread' function of tnef allows an attacker to conduct a denial of service attack by submitting a special file that triggers invalid read and write operations...

openSUSE: Security Advisory for gstreamer-plugins-good (openSUSE-SU-2017:0071-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Microsoft Office PowerPoint 2010 - MSO!Ordinal5429 Missing Length Check Heap Corruption

Microsoft Office PowerPoint 2010 - MSO!Ordinal5429 Missing Length Check Heap Corruption Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=949 Platform: Microsoft Office 2010 on Windows 7 x86 Class: heap memory corruption The following crash was observed in Microsoft Office 2010...

shopify-scripts: Heap use-after-free in mrb_vm_exec

Here is an invalid memory manipulation I discover by doing some fuzzing, The code that triggers the bug : def t end def na0e end def artist k 10000 end class S0n0 def inspect super@n=na0e @r=artist end end S0n0.new.inspect The crash report using AddressSanitizer: ./mruby HEAP.rb...

Null pointer dereference

The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted mp3 file. NOTE: this issue was originally reported as involving a NULL pointer dereference...