2934 matches found
SWFTools Denial of Service Vulnerability (CNVD-2017-15101)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'dictlookup' function in the lib/q.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
CVE-2017-11100
When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swfFoldSprite function in lib/rxfswf.c...
CVE-2017-11096
When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swfDeleteFilter function in lib/modules/swffilter.c...
Null pointer dereference
When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dictlookup function in lib/q.c...
CVE-2017-11097
Removed by vendor...
CVE-2017-11098
Removed by vendor...
Heap overflow
When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock function in lib/ttf.c...
ytnef denial of service vulnerability (CNVD-2017-09347)
ytnef is an application library for extracting data from winmail.dat files. A denial of service vulnerability exists in the 'MAPIPrint' function in the lib/ytnef.c file in ytnef version 1.9.2. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
The vulnerability of the Android operating system, which allows a perpetrator to cause the device to freeze or restart.
The vulnerability in HevcUtils.cpp within the libstagefright Mediaserver library of the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to freeze or restart through a specially...
Heap overflow
In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
Code injection
In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...
DEBIAN-CVE-2017-9470
In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...
UBUNTU-CVE-2017-9474
In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2017-9473
In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service memory consumption via a crafted file...
CVE-2017-9471
The CVE-2017-9471 issue affects ytnef 1.9.2 where the SwapWord function in lib/ytnef.c can be exploited by a crafted file to trigger a heap-based buffer over-read, leading to application crash (DoS). Descriptions across connected sources confirm the vulnerability in libytnef and its impact as a d...
AutoTrace Denial of Service Vulnerability (CNVD-2017-08526)
AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in the pxl-outline.c:106:54 of the libautotrace.a file in AutoTrace version 0.31.1. An attacker can exploit this vulnerability to cause a denial of service...
CVE-2017-9432
Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer overflow related to the DatabaseName::read function in lib/StarWriterStruct.cxx...
CVE-2017-9265
CVE-2017-9265 : Open vSwitch (OvS) 2.7.0 contains a buffer over-read while parsing the GroupMod OpenFlow message from the controller (function ofputil_pull_ofp15_group_mod in lib/ofp-util.c). Exploitation could cause a denial-of-service condition. Public sources in the connected documents describ...
CVE-2017-9263
CVE-2017-9263 affects Open vSwitch 2.7.0 where parsing an OpenFlow role status message can trigger abort() on undefined role status reasons in lib/ofp-print.c, enabling a remote DoS via a malicious switch. This is the core issue described across security notices (RHSA advisories and OSV entries) ...