libfpx Denial of Service Vulnerability (CNVD-2017-25764)

libfpx is a library for manipulating FlashPIX images. A denial of service vulnerability exists in OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx, which can be exploited by a remote attacker to cause a denial of service null pointer dereference via a specially crafted fpx image...

CVE-2017-12924

CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service divide-by-zero error via a crafted fpx image...

CVE-2017-12924

CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service divide-by-zero error via a crafted fpx image...

CVE-2017-12922

wchar.c in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12922

wchar.c in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12921

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

Null pointer dereference

CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12923

OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

Null pointer dereference

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

Null pointer dereference

wchar.c in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12920

CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12919

Heap-based buffer overflow in OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service via a crafted fpx image...

CVE-2017-12920

CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12923

OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

Double free

Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service via a crafted fpx image...

CVE-2017-12923

OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12924

The vulnerability CVE-2017-12924 affects the library libfpx, specifically version 1.3.1_p6, where CDirVector::GetTable in dirfunc.hxx is vulnerable. A crafted FlashPIX image can trigger a divide-by-zero error, allowing remote attackers to cause a denial of service. The connected documents confirm...

CVE-2017-12919

CVE-2017-12919 describes a heap-based buffer overflow in libfpx 1.3.1_p6, specifically in OLEStream::WriteVT_LPSTR (olestrm.cpp). A remote attacker can cause a denial of service by supplying a crafted FPX image. The vulnerability is network-exploitable as indicated by the CVSS vector. Connected s...

CVE-2017-12921

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12920

CVE-2017-12920 affects libfpx version 1.3.1_p6; the vulnerability is a denial of service caused by a NULL pointer dereference in CDirectory::GetDirEntry in dir.cxx when parsing a crafted FlashPIX (fpx) image. The connected sources describe a remote trigger via a crafted image; no exploitation sta...