CVE-2017-12921

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12920

CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12920

CVE-2017-12920 affects libfpx version 1.3.1_p6; the vulnerability is a denial of service caused by a NULL pointer dereference in CDirectory::GetDirEntry in dir.cxx when parsing a crafted FlashPIX (fpx) image. The connected sources describe a remote trigger via a crafted image; no exploitation sta...

CVE-2017-12921

CVE-2017-12921 affects the libfpx library (version 1.3.1_p6). The vulnerability is in PFileFlashPixView::GetGlobalInfoProperty (f_fpxvw.cpp) and allows remote attackers to cause a denial of service via a crafted FPX image, caused by a NULL pointer dereference. Public sources document the conditio...

CVE-2017-12922

The CVE-2017-12922 vulnerability affects wchar.c in libfpx 1.3.1_p6, where a crafted Fpx image can be used by a remote attacker to cause a denial of service via a NULL pointer dereference. This results in partial availability impact per CVSS2 (base score 4.3) and a higher impact on availability w...

CVE-2017-12924

CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service divide-by-zero error via a crafted fpx image...

CVE-2017-12925

CVE-2017-12925 affects libfpx 1.3.1_p6, with a vulnerability in DfFromLB (docfile.cxx) that can cause a denial of service via a crafted FlashPIX image due to a double-free flaw. Public references in the connected documents corroborate a DoS impact; exploitation details are not provided in the dat...

CVE-2017-12923

CVE-2017-12923 concerns libfpx 1.3.1_p6. The flaw is in OLEStream::WriteVT_LPSTR (olestrm.cpp) that allows a remote attacker to cause a denial of service via a specially crafted FPX image, resulting in a NULL pointer dereference. The vulnerability is described across multiple sources (NVD entry a...

CVE-2017-12923: NULL Pointer Dereference

OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12921: NULL Pointer Dereference

PFileFlashPixView::GetGlobalInfoProperty in ffpxvw.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

PT-2017-12781 · Swiss Federal Institute Of Technology +1 · Libfpx +1

Name of the Vulnerable Software and Affected Versions: libfpx version 1.3.1 p6 Description: A double free issue in the DfFromLB function in docfile.cxx allows remote attackers to cause a denial of service via a crafted fpx image. Recommendations: For libfpx version 1.3.1 p6, update to a version...

CVE-2017-12920: NULL Pointer Dereference

CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

CVE-2017-12925: Double Free

Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service via a crafted fpx image...

CVE-2017-12924: Divide By Zero

CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1p6 allows remote attackers to cause a denial of service divide-by-zero error via a crafted fpx image...

CVE-2017-12919: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in OLEStream::WriteVTLPSTR in olestrm.cpp in libfpx 1.3.1p6 allows remote attackers to cause a denial of service via a crafted fpx image...

CVE-2017-12922: NULL Pointer Dereference

wchar.c in libfpx 1.3.1p6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted fpx image...

PT-2017-12777 · Libfpx +1 · Libfpx +1

Name of the Vulnerable Software and Affected Versions: libfpx version 1.3.1 p6 Description: The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted fpx image. This is due to a problem in the...

GLSA-201605-03 : libfpx: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201605-03 libfpx: Denial of Service A double free vulnerability has been discovered in the FreeAllMemory function in jpeg/dectile.c. Impact : A remote attacker could entice a user to open a specially crafted FPX image using an...

libfpx: Denial of service

Background A library for manipulating FlashPIX images. Description A double free vulnerability has been discovered in the FreeAllMemory function in jpeg/dectile.c. Impact A remote attacker could entice a user to open a specially crafted FPX image using an application linked against libfpx, possib...

Double free

Double free vulnerability in the FreeAllMemory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers to cause a denial of service crash via a crafted FPX image...