in bfabiszewski/libmobi

✍️ Description Overview This vulnerability is of out-of-bound read, which lets attackers read memory information beyond the buffer size. Possibly, attackers can use this to do DOS Denial of Service attack or ALSR bypass by reading sensitive memory address information to all applications which use...

in bfabiszewski/libmobi

✍️ Description Overview This vulnerability is of writing user controlled values out of the buffer. The buffer is of MOBIBuffer type which is allocated using malloc. It is possible for the attacker to finally accomplish RCE Remote Code Execution using this out-of-bound write vulnerability to...

Libmobi Information Disclosure Vulnerability (CNVD-2018-16956)

Libmobi is used to process Mobipocket/Kindle MOBI e-book format document C library . An information disclosure vulnerability exists in the mobiparseindexentry function in index.c in Libmobi version 0.3. A remote attacker can exploit this vulnerability to obtain information via specially crafted...

Libmobi Denial of Service Vulnerability

Libmobi is used to process Mobipocket/Kindle MOBI e-book format document C library . A denial of service vulnerability exists in the mobidecodefontresource function in util.c in Libmobi version 0.3. A remote attacker can exploit this vulnerability via specially crafted mobi files to cause a denia...

Heap overflow

The mobidecodefontresource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

CVE-2018-11725

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11726

The mobidecodefontresource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

Heap overflow

The mobipk1decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

Heap overflow

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11724

The mobipk1decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

CVE-2018-11725

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11726

The mobidecodefontresource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

CVE-2018-11724

The mobipk1decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

CVE-2018-11725

The CVE-2018-11725 vulnerability affects Libmobi 0.3, where mobi_parse_index_entry (in index.c) can be exploited by a crafted MOBI file to trigger a heap-based buffer over-read, enabling information disclosure. This is a remote issue with no explicit exploit details provided in the documents. Imp...

CVE-2018-11724

The vulnerability CVE-2018-11724 affects Libmobi 0.3, specifically the mobi_pk1_decrypt function in encryption.c. A crafted mobi file can trigger a heap-based buffer overflow, allowing remote attackers to cause a denial of service and, per the entry, potentially other unspecified impact. Details ...

CVE-2018-11726

Libmobi 0.3 is affected by a vulnerability in mobi_decode_font_resource (util.c) that can be triggered by a crafted MOBI file, causing a heap-based buffer overflow with remote DoS or possible other impact. The Connected documents corroborate Libmobi 0.3 as the vulnerable version; no remediation o...

CVE-2018-11724

The mobipk1decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

CVE-2018-11726

The mobidecodefontresource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted mobi file...

CVE-2018-11725

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...

CVE-2018-11725

The mobiparseindexentry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted mobi file...